CN106817302B - Method and device for realizing coordination switching between two-layer virtual private network and three-layer virtual private network - Google Patents
Method and device for realizing coordination switching between two-layer virtual private network and three-layer virtual private network Download PDFInfo
- Publication number
- CN106817302B CN106817302B CN201510868202.2A CN201510868202A CN106817302B CN 106817302 B CN106817302 B CN 106817302B CN 201510868202 A CN201510868202 A CN 201510868202A CN 106817302 B CN106817302 B CN 106817302B
- Authority
- CN
- China
- Prior art keywords
- layer
- network element
- subinterface
- access ring
- convergence
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L45/00—Routing or path finding of packets in data switching networks
- H04L45/22—Alternate routing
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L12/00—Data switching networks
- H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
- H04L12/46—Interconnection of networks
- H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
Abstract
The embodiment of the invention discloses a method for realizing the coordinated switching of two-layer and three-layer virtual private networks, which comprises the steps of establishing a logical relationship between a first network element on an access ring and a first reference three-layer convergence subinterface according to a network topology structure; when a first breakpoint appears on a convergence ring hung below a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint appears on a link between the main bridge node and a standby bridge node thereof, detecting a protocol IP address network segment which is interconnected between networks inaccessible to a route of a first reference three-layer convergence sub-interface and is caused by the first breakpoint and the second breakpoint, wherein the IP address network segment corresponds to a first network element of an access ring; and starting VPN FRR protection switching according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment. The embodiment of the invention also discloses a device for realizing the coordination and switching of the two-layer virtual private network and the three-layer virtual private network.
Description
Technical Field
The present invention relates to gateway technologies in the field of communications, and in particular, to a method and an apparatus for implementing coordinated switching between two-layer and three-layer virtual private networks.
Background
An existing Packet Transport Network (PTN) architecture generally comprises a backbone ring, a convergence ring, and an access ring or an access chain, wherein the backbone ring is an annular structure formed by connecting a plurality of backbone nodes in series; the convergence ring is an annular structure formed by connecting at least one backbone node and a plurality of convergence nodes in series on the same backbone ring; the access ring is an annular structure formed by connecting a backbone node or one to two sink nodes in series with a plurality of access nodes, and is generally divided into a dual-homing access ring and a single-sink access ring; the access link is a chain structure formed by connecting a backbone node, a sink node or an access node on an access ring with a plurality of access nodes in series.
When a PTN is used to carry Long Term Evolution (LTE) service, a common networking topology of the PTN network is a networking topology structure in a dual-uplink form, as shown in fig. 1. In the dual-uplink networking topology shown in fig. 1, a three-Layer Virtual private Network (L3 VPN) is generally configured on a core Layer PTN device and a backbone convergence device, a two-Layer Virtual private Network (L2 VPN) is configured on an access convergence Layer, and a method of L2VPN + L3VPN is adopted to carry and schedule an LTE service. The device located at the network boundary between the L2VPN and the L3VPN is called a bridge node between the two-layer virtual interface and the three-layer convergence subinterface (bridge node between L2L 3), that is, a backbone node, and a two-layer virtual interface (L2 virtual interface) and a three-layer convergence subinterface (L3 convergence subinterface) for configuring an Internet Protocol (IP) network segment address of a base station are arranged inside the bridge node between L2L3, so that the bridge node between L2L3 can establish a bridge relationship between the L2 virtual interface and the L3 convergence subinterface, thereby forwarding the service between the L2VPN and the L3 VPN.
In order to protect the traffic when the bridging node between L2L3 fails, a double-hanging form as shown in fig. 1 is usually adopted. In an L2VPN network, Pseudo Wire (PW) dual-homing protection is adopted, a dual-homing node Edge Router (PE) corresponding to the PW dual-homing protection, PE3/PE4, PE5/PE6 and PE7/PE8 respectively form main and standby gateway Virtual Router Redundancy Protocol (VRRP) protection facing an evolution base station (e-NodeB), wherein the e-NodeB is expressed by eNB-n, and n is an integer; meanwhile, Virtual Private Network Fast reroute (VPN FRR) protection is configured inside the L3VPN, and a bridge node (PE node) between the primary and secondary next hops L2L3 is configured for all Virtual Private Network Routing Forwarding (VRF, VPN Routing & Forwarding) routes, wherein fault detection between PE nodes can be implemented by adopting an Operation Administration and Maintenance (OAM) function of a Label Switching Path (LSP) layer.
However, in the existing technology for networking protection of LTE services carried by PTN, a linkage mechanism for L2VPN and L3VPN protection is lacking, and as shown in fig. 2, a breakpoint occurs on a convergence ring 1 under a primary bridge node PE3 between L2L3, and a breakpoint also occurs on a link between a primary bridge node PE3 and a backup bridge node PE4 thereof, at this time, since in an L2VPN network, the primary bridge node PE3 cannot forward downlink services of the LTE network to an LTE base station, but cannot sense a fault in the L2VPN network within the L3VPN range, and still sends downlink services to PE3, which causes interruption of downlink services on an access ring under the convergence ring 1.
Disclosure of Invention
In order to solve the above technical problems, embodiments of the present invention are expected to provide a method and an apparatus for implementing coordinated switching between two-layer and three-layer virtual private networks, which can implement linkage of L2VPN and L3VPN protection and ensure normal operation of services.
The technical scheme of the invention is realized as follows:
the embodiment of the invention provides a method for realizing coordination and switching of two-layer and three-layer virtual private networks, which comprises the following steps:
establishing a logical relationship between a first network element on an access ring and a first reference three-layer convergence subinterface according to a network topology structure;
when a first breakpoint appears on a convergence ring hung below a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint appears on a link between the main bridge node and a standby bridge node thereof, detecting a protocol IP address network segment which is interconnected between networks inaccessible to a route of a first reference three-layer convergence sub-interface and is caused by the first breakpoint and the second breakpoint, wherein the IP address network segment corresponds to a first network element of an access ring;
and starting the FRR protection switching of the virtual private network fast reroute VPN according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment.
In the foregoing solution, the starting the VPN FRR protection switching according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment includes:
and starting VPN FRR protection switching of the first reference three-layer convergence subinterface corresponding to the first network element on the access ring according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment.
In the foregoing solution, after the establishing a logical relationship between a first network element on an access ring and a first reference three-layer convergence sub-interface, and before detecting an IP address network segment where a route of the first reference three-layer convergence sub-interface is unreachable due to the first breakpoint and the second breakpoint, the method further includes:
determining a corresponding relationship among the first network element, the second-layer virtual interface and the first reference three-layer convergence subinterface of the access ring according to a logical relationship between the first network element and the first reference three-layer convergence subinterface on the access ring and a preset corresponding relationship between the second-layer virtual interface and the third-layer convergence subinterface;
and according to the corresponding relation among the first network element, the two-layer virtual interface and the first reference three-layer convergence subinterface of the access ring, configuring the Long Term Evolution (LTE) service to the two-layer virtual interface bridged with the first main bridging node of the first reference three-layer convergence subinterface to which the first network element belongs so as to carry out the LTE service.
In the foregoing solution, the starting, according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment, the VPN FRR protection switching of the first reference three-layer convergence subinterface corresponding to the first network element on the access ring includes:
and switching the LTE service from the first reference three-layer convergence subinterface on the first main bridging node to a second reference three-layer convergence subinterface on the first standby bridging node according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment.
In the foregoing solution, when the network topology changes and the first network element on the access ring corresponds to the third reference three-layer convergence subinterface, the method further includes:
deleting the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface;
and establishing a logical relationship between the first network element on the access ring and the third reference three-layer convergence subinterface so as to carry out the LTE service again.
The embodiment of the invention provides a device for realizing the coordinated switching of two-layer and three-layer virtual private networks, which comprises:
the establishing unit is used for establishing a logical relationship between a first network element on the access ring and the first reference three-layer convergence subinterface according to the network topology structure;
a detecting unit, configured to detect a protocol IP address network segment that is interconnected between networks where a route of the first reference three-layer convergence sub-interface is inaccessible and that is caused by a first breakpoint and a second breakpoint when the first breakpoint occurs on a convergence ring that is under-hung by a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint occurs on a link between the main bridge node and a standby bridge node thereof, where the IP address network segment corresponds to a first network element of the access ring;
and the starting unit is used for starting the virtual private network fast reroute VPN FRR protection switching according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface established by the establishing unit and the IP address network segment detected by the detecting unit.
In the foregoing scheme, the starting unit is specifically configured to start, according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface established by the establishing unit and the IP address network segment detected by the detecting unit, VPN FRR protection switching of the first reference three-layer convergence subinterface corresponding to the first network element on the access ring.
In the foregoing solution, the apparatus for implementing coordinated switching between two-layer and three-layer virtual private networks further includes: a determining unit and a configuring unit;
the determining unit is configured to, after the establishing unit establishes a logical relationship between a first network element on an access ring and a first reference three-layer convergence sub-interface, before the detecting unit detects an IP address network segment where a route of the first reference three-layer convergence sub-interface is inaccessible due to the first breakpoint and the second breakpoint, determine a corresponding relationship between the first network element, the second layer virtual interface, and the first reference three-layer convergence sub-interface of the access ring according to the logical relationship between the first network element and the first reference three-layer convergence sub-interface on the access ring established by the establishing unit and a preset corresponding relationship between the second layer virtual interface and the third layer convergence sub-interface;
the configuration unit is configured to configure a long term evolution LTE service to a two-layer virtual interface bridged with a first host bridging node of a first reference three-layer convergence subinterface to which a first network element belongs, according to the correspondence between the first network element, the two-layer virtual interface, and the first reference three-layer convergence subinterface of the access ring determined by the determination unit, so as to perform the LTE service.
In the foregoing solution, the starting unit is further specifically configured to switch the LTE service from the first reference three-layer convergence sub-interface on the first host bridge node to the second reference three-layer convergence sub-interface on the first standby bridge node according to the logical relationship between the first network element on the access ring established by the establishing unit and the first reference three-layer convergence sub-interface and the IP address network segment detected by the detecting unit.
In the foregoing solution, the apparatus for implementing coordinated switching between two-layer and three-layer virtual private networks further includes: a deletion unit;
the deleting unit is configured to delete the logical relationship between the first network element on the access ring and the first reference three-tier convergence sub-interface, which is established by the establishing unit, when the network topology changes and the first network element on the access ring corresponds to the third reference three-tier convergence sub-interface;
the establishing unit is further configured to establish a logical relationship between the first network element on the access ring and the third reference three-layer convergence subinterface, so as to perform an LTE service again.
The embodiment of the invention provides a method and a device for realizing the coordinated switching of two-layer and three-layer virtual private networks, wherein a logical relation between a first network element on an access ring and a first reference three-layer convergence subinterface is established according to a network topology structure; when a first breakpoint appears on a convergence ring hung below a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint appears on a link between the main bridge node and a standby bridge node thereof, detecting a protocol IP address network segment which is interconnected between networks inaccessible to a route of a first reference three-layer convergence sub-interface and is caused by the first breakpoint and the second breakpoint, wherein the IP address network segment corresponds to a first network element of an access ring; and starting Virtual Private network fast reroute (VPN FRR) protection switching according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment. By adopting the technical scheme, the device can enable the L3VPN to perceive the change in the L2VPN network, so that a linkage mechanism for protecting the L2VPN and the L3VPN is established, the phenomenon of service interruption in the prior art is avoided, the normal operation of the service is ensured, and the performance of the system is further improved.
Drawings
Fig. 1 is a networking topology diagram of a dual-uplink form based on a PTN network in the prior art;
fig. 2 is a networking topology diagram of multiple faults occurring when a bridge node between L2L3 has a single aggregation ring;
fig. 3 is a first flowchart of a method for implementing coordinated switching between two-layer and three-layer virtual private networks according to an embodiment of the present invention;
fig. 4 is a network topology diagram of a bridge node of the L2L3 with multiple aggregation rings and multiple faults occurring when the same aggregation ring has multiple access rings;
fig. 5 is a second flowchart of a method for implementing coordinated switching between two-layer and three-layer virtual private networks according to an embodiment of the present invention;
fig. 6 is a third flowchart of a method for implementing coordinated switching between two-layer and three-layer virtual private networks according to an embodiment of the present invention;
fig. 7 is a first schematic structural diagram of a device for implementing coordinated switching between two-layer and three-layer virtual private networks according to an embodiment of the present invention;
fig. 8 is a schematic structural diagram of a device for implementing coordinated switching between two-layer and three-layer virtual private networks according to an embodiment of the present invention;
fig. 9 is a third schematic structural diagram of a device for implementing coordinated switching between two-layer and three-layer virtual private networks according to an embodiment of the present invention.
Detailed Description
The technical solution in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention.
Example one
An embodiment of the present invention provides a method for implementing coordinated switching between two-layer and three-layer virtual private networks, which is described by taking a device for implementing coordinated switching between two-layer and three-layer virtual private networks as a service gateway as an example, and as shown in fig. 3, the method may include:
s101, according to a network topology structure, a logical relationship between a first network element on an access ring and a first reference three-layer convergence subinterface is established.
In the embodiment of the present invention, as shown in fig. 1, a failure notification mechanism is implemented by means of an OAM function between dual-homed-node PEs in an L3VPN inside a PTN, so that information that a certain IP address network segment is unreachable due to multiple failures occurring in an L2VPN of the PTN network can be transmitted to a far-end PE of the L3VPN, and further a VPN FRR protection switching mechanism of the far-end PE is started.
Further, the failure notification mechanism and the VPN FRR protection switching mechanism are started, the aggregation route in the failed segment is switched, and as a result of the switching, all LTE services in the segment of the aggregation route, including services in both the uplink and downlink directions, are switched to the standby bridge node, so that the implementation of the coordinated switching method in the embodiment of the present invention has a certain relationship with the division of the IP address network segment of the base station; correspondingly, the embodiment of the invention also needs to divide the IP address network segments of the base stations according to the dual-homing access rings and/or the sink nodes.
It should be noted that, in the background art, the network topology of the PTN network has been introduced, as shown in fig. 1, and therefore, in this step, the service gateway may establish a logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface according to the network topology.
Particularly, the core technology of the embodiment of the invention is to realize the mapping relation between the network element and the three-layer convergence subinterfaces, realize a mapping linkage mechanism between the LTE service configuration and the network topology structure and between the three-layer convergence subinterfaces, and divide the IP network segments through the network topology structure. Because route unreachable information of a certain IP network segment caused by multiple faults in the PTN network L2VPN can be transmitted to a far-end PE node of the L3VPN so as to start VPN FRR protection switching of an L3VPN bridging node.
Specifically, the method for starting VPN FRR protection Switching is to detect a failure of an LSP by using a Multi-Protocol Label Switching-operation and management Maintenance (MPLS-OAM) technology at a bridge node between L2L3, and specifically, if an LSP corresponding to a L3 convergence subinterface (three-layer convergence subinterface) fails, it is determined that a route of a network segment corresponding to the L3 convergence subinterface is unreachable, and the route may be transmitted to a far-end PE node of an L3VPN to start VPN FRR protection Switching of the bridge node of the L3 VPN.
Specifically, the service gateway implements a logical relationship between the first network element (topology network element) and the three-layer convergence subinterface on a service configuration interface of the network management, that is, the service gateway implements an intuitive relationship between the network element and the three-layer convergence subinterface through a network management menu, and may also be represented in a graph or table form. Namely a first network element-a three-layer convergence subinterface; thus all network elements of the access ring are attributed to a three-layer convergence subinterface. After the logical relationship is established, the service of other three-layer convergence subinterfaces of the first network element is not affected, but the service of the first network element is prompted to have the convergence logical relationship and whether the service is changed or not.
It should be noted that the serving gateway in the embodiment of the present invention is an sgw (serving Gate way). Particularly, the L3 convergence sub-interface and the L2 virtual interface in the embodiment of the present invention are both shared by an access ring.
S102, when a first breakpoint appears on a convergence ring hung below a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint appears on a link between the main bridge node and a standby bridge node of the main bridge node, detecting an IP address network segment which is inaccessible to a route of a first reference three-layer convergence sub-interface and is caused by the first breakpoint and the second breakpoint, wherein the IP address network segment corresponds to a first network element of an access ring.
In this step, the service gateway detects the unreachable IP address network segment of the route of the first reference three-layer convergence sub-interface caused by the first breakpoint and the second breakpoint.
It should be noted that the unreachable of the route of the IP address network segment means that 2N (N is the number of access link points) LSPs may exist in the L2 virtual interface corresponding to one L3 convergence sub-interface, and if 2N LSPs corresponding to a certain L3 convergence sub-interface fail, it indicates that the route of the IP address network segment corresponding to the L3 convergence sub-interface is unreachable.
It should be noted that, the above failure notification and VPN FRR switching mechanism, if all LSPs corresponding to a certain L3 convergence subinterface fail, can switch a certain aggregation route, and the switching will switch all LTE services (including services in both uplink and downlink directions) in a certain aggregation route network segment to the standby bridge node, so that this protection mechanism has a certain relationship with the division of the base station IP network segment.
As shown in fig. 4, for a certain aggregation ring, when a double-breakpoint fault on the aggregation ring causes that a part of the base station traffic hanging down on the access ring cannot reach the main bridging node PE3 between L2L3, and the LTE traffic hanging down on other access rings still can reach the main bridging node PE3 between L2L3, if IP segment division is performed according to the aggregation ring, it is obvious that the condition for starting VPN FRR protection switching cannot be satisfied, so that the affected traffic cannot be recovered. Because the access ring (including the aggregation node and the access chain hung thereunder) is the minimum unit for protecting the ring network, in order to avoid the situation that the base station adopts an IP planning mode based on the access ring (including the aggregation node and the access chain hung thereunder), each network segment contains 16 IPs, and each gateway can carry 11 base stations except all 0 and all 1 addresses, gateway and Virtual Router Redundancy Protocol (VRRP) addresses (reserving 2 addresses).
S103, according to the logical relationship and the IP address network segment between the first network element on the access ring and the first reference three-layer convergence subinterface, starting VPN FRR protection switching.
Here, after the service gateway detects the unreachable IP address network segment of the route of the first reference three-layer convergence sub-interface caused by the first breakpoint and the second breakpoint, the service gateway may start the VPN FRR protection switching according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence sub-interface and the IP address network segment.
It should be noted that the first reference three-layer convergence sub-interface in the embodiment of the present invention is a three-layer convergence sub-interface corresponding to the host bridge node between L2L 3.
Specifically, since the IP address network segment corresponds to the first network element of the access ring, the service gateway may start the VPN FRR protection switching of the first reference three-layer convergence subinterface corresponding to the first network element on the access ring according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment.
Further, as shown in fig. 5, after S101 and before S102, the method for implementing the coordinated switching between the two-layer virtual private network and the three-layer virtual private network according to the embodiment of the present invention further includes: S104-S105, specifically as follows:
s104, determining the corresponding relation among the first network element, the second-layer virtual interface and the first reference three-layer convergence subinterface of the access ring according to the logical relation between the first network element and the first reference three-layer convergence subinterface on the access ring and the preset corresponding relation between the second-layer virtual interface and the third-layer convergence subinterface.
Here, after the service gateway establishes a logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface according to the network topology, the service gateway may determine a corresponding relationship between the first network element, the second-layer virtual interface, and the first reference three-layer convergence subinterface of the access ring according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and a preset corresponding relationship between the second-layer virtual interface and the third-layer convergence subinterface.
It can be understood that the service gateway knows A, B the correspondence between a and B and the correspondence between B and C.
S105, according to the corresponding relation among the first network element, the two-layer virtual interface and the first reference three-layer convergence subinterface of the access ring, the LTE service is configured to the two-layer virtual interface bridged with the first main bridging node of the first reference three-layer convergence subinterface to which the first network element belongs, so as to carry out the LTE service.
In this step, after the serving gateway determines the correspondence between the first network element, the two-layer virtual interface, and the first reference three-layer convergence subinterface of the access ring, the serving gateway may configure the LTE service to the two-layer virtual interface bridged with the first host bridging node of the first reference three-layer convergence subinterface to which the first network element belongs, according to the correspondence between the first network element, the two-layer virtual interface, and the first reference three-layer convergence subinterface of the access ring, so as to perform the LTE service.
Specifically, when the first network element of the access ring configures the LTE service, the serving gateway may prompt whether to configure the LTE service to a two-layer virtual interface having a bridging relationship with a three-layer convergence subinterface to which the first network element belongs, that is, to configure the LTE service to a two-layer virtual interface corresponding to the three-layer convergence subinterface having a logical relationship with the first network element through the PW. Therefore, when the LTE service is configured, the LTE service can be configured in a constrained manner according to the three-layer convergence subinterfaces which belong to the network topology relationship in advance.
It should be noted that the above constraints are only hints, such as: when the LTE service is carried out by using the IP address network segment constraint condition, the service gateway can determine the flow of the LTE service through the relation between the first network element, the two-layer virtual interface and the three-layer convergence sub-interface.
In this case, as shown in fig. 6, S103 may specifically be: s1031, and after S1031, when the network topology structure changes, which results in that the first network element on the access ring corresponds to the third reference three-layer convergence subinterface, the method for implementing the coordinated switching between the two-layer and three-layer virtual private networks provided in the embodiment of the present invention further includes: S106-S107. The method comprises the following specific steps:
and S1031, switching the LTE service from the first reference three-layer convergence subinterface on the first main bridging node to the second reference three-layer convergence subinterface on the first standby bridging node according to the logical relationship and the IP address network segment between the first network element on the access ring and the first reference three-layer convergence subinterface.
In this step, when a first breakpoint occurs on a convergence ring under a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint occurs on a link between the main bridge node and a standby bridge node thereof, after a service gateway detects an IP address network segment in which a route of a first reference three-layer convergence sub-interface is inaccessible due to the first breakpoint and the second breakpoint, the service gateway may determine an access ring corresponding to the IP address network segment according to the IP address network segment; and then switching the LTE service from the first reference three-layer convergence subinterface on the first main bridging node under the first network element of the access ring to the second reference three-layer convergence subinterface on the first standby bridging node according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface.
For example, as shown in fig. 4, when a double-breakpoint fault occurs on aggregation ring 1a, where one breakpoint fault is located on aggregation ring 1 hung under main bridge node PE3 between L2L3, and another breakpoint fault is located on a link between main bridge node PE3 and its standby bridge node PE4, then LTE traffic of a base station hung under access ring 1 on aggregation ring 1a, such as traffic of eNB1, cannot reach PE3, and LTE traffic of a base station hung under access ring 2, such as traffic of eNB5, can still reach PE 3. When the technical scheme provided by the embodiment of the invention is adopted, LSPs corresponding to the L3 convergence sub-interface from the access ring 1 to the PE3 affected by the fault all fail, the uplink LTE service of the base station cannot reach the PE3, at this time, the uplink LTE service can be switched to the PE4 through PW dual-homing protection switching, the PE3 coordinates the PE1 to start the VPN FRR of the L3 convergence sub-interface corresponding to the access ring 1, and switches the PE3 downlink service to the PE4, so that the uplink LTE service and the downlink LTE service on the access ring 1 are both switched to the PE4, and thus, the uplink LTE service and the downlink LTE service on the access ring 1 are both protected. For the access ring 2 of the aggregation ring 1a that is not affected by the failure, the uplink traffic of the access ring 2 can still reach the PE3, so the VPN FRR protection switching is not started. For the aggregation ring 1b and the access ring above the aggregation ring with only a single breakpoint fault, the uplink LTE service still can reach PE3, and VPN FRR protection switching is not started.
S106, when the network topology structure changes and the first network element on the access ring corresponds to the third reference three-layer convergence subinterface, deleting the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface.
S107, establishing a logical relation between the first network element on the access ring and the third reference three-layer convergence subinterface to perform the LTE service again.
Here, steps S106 and S107 are both completed by the service gateway.
When the network topology changes, which results in that the first network element on the access ring corresponds to the third reference three-layer convergence subinterface, the steps of S106 and S107 are performed.
It should be noted that when the serving gateway switches the LTE service from the first reference three-tier convergence subinterface on the first host bridge node to the second reference three-tier convergence subinterface on the first standby bridge node, a new logical relationship between the first network element and the three-tier convergence subinterface of the standby bridge node is formed, so that when the network topology changes due to the cutover or any reason, and the first network element on the access ring corresponds to the third reference three-tier convergence subinterface, the serving gateway deletes the logical relationship between the first network element on the access ring and the first reference three-tier convergence subinterface, and establishes the logical relationship between the first network element on the access ring and the third reference three-tier convergence subinterface, so as to perform the LTE service again.
It should be noted that, in the embodiment of the present invention, the second reference three-layer convergence sub-interface and the third reference convergence sub-interface are three-layer convergence sub-interfaces corresponding to the standby bridge node between the L2L 3.
Specifically, when a network element is required to be adjusted to another access ring, the logical relationship between the network element and the three-layer convergence subinterfaces is deleted (the operation does not affect the service), then the corresponding service is deleted according to the normal cutover flow, the logical relationship between the new network element and the three-layer convergence subinterfaces is established, and then the LTE service configuration is performed according to the newly-established service flow.
It should be noted that, after S101, as long as the network topology changes, which causes the first network element on the access ring to correspond to the third reference three-layer convergence subinterface, S106-S107 are executed, and then according to the newly established logical relationship between the first network element on the access ring and the third reference three-layer convergence subinterface, the method for implementing the coordinated switching between the two-layer virtual private network and the three-layer virtual private network provided in the embodiment of the present invention is correspondingly performed.
In the method for implementing coordinated switching between two-layer and three-layer virtual private networks provided by the embodiment of the present invention, a service gateway establishes a logical relationship between a first network element on an access ring and a first reference three-layer convergence subinterface according to a network topology; when a first breakpoint appears on a convergence ring hung below a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint appears on a link between the main bridge node and a standby bridge node thereof, detecting a protocol IP address network segment which is interconnected between networks inaccessible to a route of a first reference three-layer convergence sub-interface and is caused by the first breakpoint and the second breakpoint, wherein the IP address network segment corresponds to a first network element of an access ring; and starting VPN FRR protection switching according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment. By adopting the technical scheme, the service gateway can enable the L3VPN to perceive the change in the L2VPN network, so that a linkage mechanism for protecting the L2VPN and the L3VPN is established, the phenomenon of service interruption in the prior art is avoided, the normal operation of the service is ensured, and the performance of the system is further improved.
Example two
As shown in fig. 7, an embodiment of the present invention provides an apparatus 1 for implementing coordinated switching between a two-layer virtual private network and a three-layer virtual private network, where the apparatus may include:
the establishing unit 10 is configured to establish a logical relationship between a first network element on the access ring and the first reference three-layer convergence subinterface according to the network topology.
A detecting unit 11, configured to detect a protocol IP address network segment that is interconnected between networks where a route of the first reference three-layer convergence sub-interface is inaccessible and that is caused by a first breakpoint and a second breakpoint when the first breakpoint occurs on a convergence ring that is hung below a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint occurs on a link between the main bridge node and a standby bridge node of the main bridge node, where the IP address network segment corresponds to a first network element of the access ring.
A starting unit 12, configured to start VPNFRR protection switching according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface established by the establishing unit 10 and the IP address network segment detected by the detecting unit 11.
Optionally, the starting unit 12 is specifically configured to start, according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface established by the establishing unit 10 and the IP address network segment detected by the detecting unit 11, VPN FRR protection switching of the first reference three-layer convergence subinterface corresponding to the first network element on the access ring.
Optionally, as shown in fig. 8, the apparatus 1 for implementing coordinated switching between two-layer and three-layer virtual private networks further includes: a determination unit 13 and a configuration unit 14.
The determining unit 13 is configured to, after the establishing unit 10 establishes a logical relationship between a first network element on an access ring and a first reference three-layer convergence sub-interface, before the detecting unit 11 detects an IP address network segment, caused by the first breakpoint and the second breakpoint, of the first reference three-layer convergence sub-interface, and before a route of the first reference three-layer convergence sub-interface is unreachable, determine a corresponding relationship between the first network element, the second layer virtual interface, and the first reference three-layer convergence sub-interface of the access ring according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence sub-interface established by the establishing unit 10 and a preset corresponding relationship between the second layer virtual interface and the three-layer convergence sub-interface.
The configuration unit 14 is configured to configure, according to the correspondence relationship between the first network element, the two-layer virtual interface, and the first reference three-layer convergence subinterface of the access ring determined by the determination unit 13, a long term evolution LTE service to the two-layer virtual interface bridged with the first host bridging node of the first reference three-layer convergence subinterface to which the first network element belongs, so as to perform the LTE service.
Optionally, the starting unit 12 is further specifically configured to switch the LTE service from the first reference three-layer convergence sub-interface on the first host bridge node to the second reference three-layer convergence sub-interface on the first standby bridge node according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence sub-interface established by the establishing unit 10 and the IP address network segment detected by the detecting unit 11.
Optionally, as shown in fig. 9, the apparatus 1 for implementing coordinated switching between two-layer and three-layer virtual private networks further includes: and a deletion unit 15.
The deleting unit 15 is configured to delete the logical relationship between the first network element on the access ring and the first reference three-tier convergence sub-interface, which is established by the establishing unit 10, when the network topology changes and the first network element on the access ring corresponds to the third reference three-tier convergence sub-interface.
The establishing unit 10 is further configured to establish a logical relationship between the first network element on the access ring and the third reference three-layer convergence subinterface, so as to perform an LTE service again.
It should be noted that the device for implementing the coordinated switching between the two-layer virtual private network and the three-layer virtual private network in the embodiment of the present invention may be a service gateway.
In practical applications, the establishing unit 10, the detecting unit 11, the starting unit 12, the determining unit 13, the configuring unit 14, and the deleting unit 15 may be implemented by a processor located on a device 1 (a service gateway) for implementing the coordination and switching between the two-layer virtual private network and the three-layer virtual private network, specifically, implemented by a Central Processing Unit (CPU), a Microprocessor (MPU), a Digital Signal Processor (DSP), a Field Programmable Gate Array (FPGA), or the like, and the service gateway may further include a memory, specifically, a logical relationship and a software code between a first network element on the access ring and a first reference three-layer convergence sub-interface, a logical relationship and a software code between a first network element on the access ring and a third reference three-layer convergence sub-interface, a logical relationship and a software code between a first network element on the access ring and a second reference three-layer convergence sub-interface, and a preset corresponding relationship and a software code between a second virtual interface and a three-layer convergence sub-interface, and a preset, And the correspondence between the first network element, the two-layer virtual interface, and the first reference three-layer convergence subinterface of the access ring and the software code thereof may be stored in a memory, and the memory may be connected to the processor through a system bus, where the memory is configured to store an executable program code, and the program code includes a computer operation instruction, and the memory may include a high-speed RAM memory, and may further include a non-volatile memory, for example, at least one disk memory.
The embodiment of the invention provides a device for realizing the coordinated switching of two-layer and three-layer virtual private networks, which establishes a logical relationship between a first network element on an access ring and a first reference three-layer convergence subinterface according to a network topology structure; when a first breakpoint appears on a convergence ring hung below a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint appears on a link between the main bridge node and a standby bridge node thereof, detecting a protocol IP address network segment which is interconnected between networks inaccessible to a route of a first reference three-layer convergence sub-interface and is caused by the first breakpoint and the second breakpoint, wherein the IP address network segment corresponds to a first network element of an access ring; and starting VPN FRR protection switching according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment. By adopting the technical scheme, the device can enable the L3VPN to sense the change in the L2VPN network, so that a linkage mechanism for protecting the L2VPN and the L3VPN is established, the phenomenon of service interruption in the prior art is avoided, the normal operation of the service is ensured, and the performance of the system is further improved.
As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, optical storage, and the like) having computer-usable program code embodied therein.
The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
The above description is only a preferred embodiment of the present invention, and is not intended to limit the scope of the present invention.
Claims (8)
1. A method for realizing coordination switching between two-layer and three-layer virtual private networks is characterized in that the method comprises the following steps:
establishing a logical relationship between a first network element on an access ring and a first reference three-layer convergence subinterface according to a network topology structure;
when a first breakpoint appears on a convergence ring hung below a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint appears on a link between the main bridge node and a standby bridge node thereof, detecting a protocol IP address network segment which is interconnected between networks inaccessible to a route of a first reference three-layer convergence sub-interface and is caused by the first breakpoint and the second breakpoint, wherein the IP address network segment corresponds to a first network element of an access ring;
and starting VPN FRR protection switching of the first reference three-layer convergence subinterface corresponding to the first network element on the access ring according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment.
2. The method according to claim 1, wherein after said establishing a logical relationship between a first network element on an access ring and a first reference three-tier convergence sub-interface, and before said detecting an IP address segment of the first reference three-tier convergence sub-interface unreachable by a route caused by the first breakpoint and the second breakpoint, the method further comprises:
determining a corresponding relationship among the first network element, the second-layer virtual interface and the first reference three-layer convergence subinterface of the access ring according to a logical relationship between the first network element and the first reference three-layer convergence subinterface on the access ring and a preset corresponding relationship between the second-layer virtual interface and the third-layer convergence subinterface;
and according to the corresponding relation among the first network element, the two-layer virtual interface and the first reference three-layer convergence subinterface of the access ring, configuring the Long Term Evolution (LTE) service to the two-layer virtual interface bridged with the first main bridging node of the first reference three-layer convergence subinterface to which the first network element belongs so as to carry out the LTE service.
3. The method of claim 2, wherein the starting of the VPN FRR protection switching of the first reference three-layer convergence subinterface corresponding to the first network element on the access ring according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment comprises:
and switching the LTE service from the first reference three-layer convergence subinterface on the first main bridging node to a second reference three-layer convergence subinterface on the first standby bridging node according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface and the IP address network segment.
4. The method of claim 1, wherein when the network topology changes and the first network element on the access ring corresponds to a third reference three-layer convergence subinterface, the method further comprises:
deleting the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface;
and establishing a logical relationship between the first network element on the access ring and the third reference three-layer convergence subinterface so as to carry out the LTE service again.
5. An apparatus for implementing coordinated switching between two-layer and three-layer virtual private networks, the apparatus comprising:
the establishing unit is used for establishing a logical relationship between a first network element on the access ring and the first reference three-layer convergence subinterface according to the network topology structure;
a detecting unit, configured to detect a protocol IP address network segment that is interconnected between networks where a route of the first reference three-layer convergence sub-interface is inaccessible and that is caused by a first breakpoint and a second breakpoint when the first breakpoint occurs on a convergence ring that is under-hung by a main bridge node of a two-layer virtual interface and a three-layer convergence sub-interface and a second breakpoint occurs on a link between the main bridge node and a standby bridge node thereof, where the IP address network segment corresponds to a first network element of the access ring;
and a starting unit, configured to start, according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface established by the establishing unit and the IP address network segment detected by the detecting unit, VPN FRR protection switching of the first reference three-layer convergence subinterface corresponding to the first network element on the access ring.
6. The apparatus of claim 5, wherein the means for implementing the coordinated switch between the two-layer and three-layer virtual private networks further comprises: a determining unit and a configuring unit;
the determining unit is configured to, after the establishing unit establishes a logical relationship between a first network element on an access ring and a first reference three-layer convergence sub-interface, before the detecting unit detects an IP address network segment where a route of the first reference three-layer convergence sub-interface is inaccessible due to the first breakpoint and the second breakpoint, determine a corresponding relationship between the first network element, the second layer virtual interface, and the first reference three-layer convergence sub-interface of the access ring according to the logical relationship between the first network element and the first reference three-layer convergence sub-interface on the access ring established by the establishing unit and a preset corresponding relationship between the second layer virtual interface and the third layer convergence sub-interface;
the configuration unit is configured to configure a long term evolution LTE service to a two-layer virtual interface bridged with a first host bridging node of a first reference three-layer convergence subinterface to which a first network element belongs, according to the correspondence between the first network element, the two-layer virtual interface, and the first reference three-layer convergence subinterface of the access ring determined by the determination unit, so as to perform the LTE service.
7. The apparatus of claim 6,
the starting unit is further specifically configured to switch the LTE service from the first reference three-layer convergence subinterface on the first primary bridge node to the second reference three-layer convergence subinterface on the first standby bridge node according to the logical relationship between the first network element on the access ring and the first reference three-layer convergence subinterface established by the establishing unit and the IP address network segment detected by the detecting unit.
8. The apparatus of claim 5, wherein the means for implementing the coordinated switch between the two-layer and three-layer virtual private networks further comprises: a deletion unit;
the deleting unit is configured to delete the logical relationship between the first network element on the access ring and the first reference three-tier convergence sub-interface, which is established by the establishing unit, when the network topology changes and the first network element on the access ring corresponds to the third reference three-tier convergence sub-interface;
the establishing unit is further configured to establish a logical relationship between the first network element on the access ring and the third reference three-layer convergence subinterface, so as to perform an LTE service again.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510868202.2A CN106817302B (en) | 2015-12-01 | 2015-12-01 | Method and device for realizing coordination switching between two-layer virtual private network and three-layer virtual private network |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510868202.2A CN106817302B (en) | 2015-12-01 | 2015-12-01 | Method and device for realizing coordination switching between two-layer virtual private network and three-layer virtual private network |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106817302A CN106817302A (en) | 2017-06-09 |
| CN106817302B true CN106817302B (en) | 2020-02-21 |
Family
ID=59107473
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510868202.2A Active CN106817302B (en) | 2015-12-01 | 2015-12-01 | Method and device for realizing coordination switching between two-layer virtual private network and three-layer virtual private network |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106817302B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110365578B (en) * | 2019-08-01 | 2021-12-24 | 新华三大数据技术有限公司 | Network interface control and link switching method, device, network equipment and medium |
| CN114079630B (en) * | 2020-08-10 | 2023-10-27 | 中国移动通信集团浙江有限公司 | Service protection method, device, equipment and storage medium based on SPN (service provider network) |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102611618A (en) * | 2012-02-23 | 2012-07-25 | 中兴通讯股份有限公司 | Route protection converting method and device |
| US8660129B1 (en) * | 2012-02-02 | 2014-02-25 | Cisco Technology, Inc. | Fully distributed routing over a user-configured on-demand virtual network for infrastructure-as-a-service (IaaS) on hybrid cloud networks |
| CN104135418A (en) * | 2013-05-03 | 2014-11-05 | 中国移动通信集团内蒙古有限公司 | Method and device of implementing coordinated switching of layer 2 virtual private network and layer 3 virtual private network |
| CN104683206A (en) * | 2013-11-29 | 2015-06-03 | 中国移动通信集团内蒙古有限公司 | Method and device for coordinating and switching layer 2 and layer 3 virtual private networks in bridging apparatus |
-
2015
- 2015-12-01 CN CN201510868202.2A patent/CN106817302B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US8660129B1 (en) * | 2012-02-02 | 2014-02-25 | Cisco Technology, Inc. | Fully distributed routing over a user-configured on-demand virtual network for infrastructure-as-a-service (IaaS) on hybrid cloud networks |
| CN102611618A (en) * | 2012-02-23 | 2012-07-25 | 中兴通讯股份有限公司 | Route protection converting method and device |
| CN104135418A (en) * | 2013-05-03 | 2014-11-05 | 中国移动通信集团内蒙古有限公司 | Method and device of implementing coordinated switching of layer 2 virtual private network and layer 3 virtual private network |
| CN104683206A (en) * | 2013-11-29 | 2015-06-03 | 中国移动通信集团内蒙古有限公司 | Method and device for coordinating and switching layer 2 and layer 3 virtual private networks in bridging apparatus |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106817302A (en) | 2017-06-09 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US9077561B2 (en) | OAM label switched path for fast reroute of protected label switched paths | |
| EP2364539B1 (en) | A system and method of implementing lightweight not-via ip fast reroutes in a telecommunications network | |
| EP3454510B1 (en) | Message forwarding method and apparatus | |
| CN111698152B (en) | Fault protection method, node and storage medium | |
| EP2498454A1 (en) | Method, device and system for processing service traffic based on pseudo wires | |
| WO2021258754A1 (en) | Message indication method and apparatus, and device and storage medium | |
| CN109873760A (en) | Handle the method and apparatus of routing and the method and apparatus of data transmission | |
| US9485135B1 (en) | Node-protection and path attribute collection with remote loop free alternates | |
| CN104135418B (en) | It is a kind of to realize two layers of method and device for coordinating to switch with Layer3 Virtual Private Network | |
| CN104767680B (en) | It route the method and apparatus being switched fast | |
| WO2022166543A1 (en) | Fault protection method and device, storage medium, and electronic device | |
| CN102164085B (en) | Based on tunnel group protection implementation method and the device of multi-protocol label switching network | |
| US9059791B2 (en) | Method and apparatus for protecting tunnel | |
| CN104683206A (en) | Method and device for coordinating and switching layer 2 and layer 3 virtual private networks in bridging apparatus | |
| CN105471599B (en) | Protection switching method and network equipment | |
| CN104702431B (en) | A kind of method and device of Virtual Private Network double break protection | |
| US9716639B2 (en) | Protection switching method and system | |
| WO2016123904A1 (en) | Routing convergence method, device and virtual private network system | |
| CN113615132A (en) | Fast flooding topology protection | |
| CN110601970B (en) | Tunnel protection method, system, local repair point and computer readable storage medium | |
| CN106817302B (en) | Method and device for realizing coordination switching between two-layer virtual private network and three-layer virtual private network | |
| CN108023800A (en) | A kind of guard method of LTE bearer networks and device | |
| JP2015534377A (en) | Method and apparatus for protecting service traffic | |
| CN103036781A (en) | Method and device for processing main path link failures | |
| CN105897451B (en) | OTN dispatching system and fault processing method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |