CN107948039B

CN107948039B - Address table item processing method and device

Info

Publication number: CN107948039B
Application number: CN201711147360.4A
Authority: CN
Inventors: 张恒; 解永娟
Original assignee: New H3C Security Technologies Co Ltd
Current assignee: New H3C Security Technologies Co Ltd
Priority date: 2017-11-17
Filing date: 2017-11-17
Publication date: 2020-05-29
Anticipated expiration: 2037-11-17
Also published as: CN107948039A

Abstract

The embodiment of the application provides an address table item processing method and device, which are applied to network equipment, and the method comprises the following steps: acquiring a first numerical value of an MAC address table entry in a first MAC address group and a second numerical value of an MAC address table entry in a second MAC address group, wherein the MAC address table entry in the first MAC address group belongs to a Bridge instance, and the MAC address table entry in the second MAC address group does not belong to the Bridge instance; judging whether the sum of the first numerical value and the second numerical value reaches the upper limit value of the number of the preset MAC address table items; and if the sum value reaches the upper limit value of the number of the preset MAC address table entries, deleting the MAC address table entries in the second MAC address group. By applying the technical scheme provided by the embodiment of the application, the reliability of the service forwarding system is improved.

Description

Address table item processing method and device

Technical Field

The present application relates to the field of communications technologies, and in particular, to a method and an apparatus for processing an address table entry.

Background

At present, interaction between user equipments is performed on a firewall device, that is, the firewall device is responsible for forwarding a message. The message forwarding may include: bridge (Bridge) Media Access Control (MAC) forwarding and non-VLAN Bridge MAC forwarding. The cross-VLAN Bridge MAC forwarding is cross-VLAN message forwarding based on an MAC address table item belonging to a Bridge instance; the non-cross-VLAN Bridge MAC forwarding is message forwarding in a VLAN based on an MAC address table entry which does not belong to a Bridge instance.

The two message forwarding modes are that MAC addresses are independently learned, and MAC address table entries are created, namely, firewall equipment learns the MAC addresses in a certain VLAN, and MAC address table entries which do not belong to the Bridge example are created; when a Bridge instance is created and the VLAN is added to the Bridge instance, messages sent by user equipment in the VLAN are all carried out under the Bridge instance, and the firewall equipment learns the MAC address in the VLAN again and creates a MAC address table item belonging to the Bridge instance.

In practical application, the total number of MAC address table entries that the firewall device can learn is fixed, and if the firewall device creates a large number of MAC address table entries that do not belong to the Bridge instance, the Bridge instance is created, which may cause only a part of the MAC address table entries that belong to the Bridge instance to be created, and the upper limit of the total number of MAC address table entries that the firewall device can learn is reached. In this case, in order to ensure the user interaction between the user equipments, the firewall device performs unknown unicast flooding, thereby affecting the reliability of the service forwarding system.

Disclosure of Invention

An object of the embodiments of the present application is to provide a method and an apparatus for processing an address table entry, so as to improve reliability of a service forwarding system. The specific technical scheme is as follows:

in one aspect, an embodiment of the present application provides an address table entry processing method, which is applied to a network device, and the method includes:

acquiring a first numerical value of an MAC address table entry in a first MAC address group and a second numerical value of an MAC address table entry in a second MAC address group, wherein the MAC address table entry in the first MAC address group belongs to a Bridge instance, and the MAC address table entry in the second MAC address group does not belong to the Bridge instance;

judging whether the sum of the first numerical value and the second numerical value reaches the upper limit value of the number of preset MAC address table items;

and if the sum value reaches the upper limit value of the number of the preset MAC address table entries, deleting the MAC address table entries in the second MAC address group.

In one embodiment of the present application, the method further comprises:

receiving an instance control instruction, wherein the instance control instruction comprises a corresponding relation between a target Bridge instance and a target VLAN to be added into the target Bridge instance;

adding the target VLAN into the target Bridge instance according to the corresponding relation;

learning the MAC address within the target VLAN;

and when the MAC address table entry in the second MAC address group is deleted, creating the MAC address table entry belonging to the target Bridge instance according to the learned MAC address in the target VLAN.

In an embodiment of the present application, the adding the target VLAN to the target Bridge instance specifically includes:

if the instance control instruction is an instance creating instruction, creating the target Bridge instance, and adding the target VLAN into the target Bridge instance;

and if the instance control instruction is an instance adding instruction, adding the target VLAN into the target Bridge instance.

In an embodiment of the present application, the MAC address table entry in the first MAC address group includes a MAC address table entry to be created and belonging to a Bridge instance and a MAC address table entry already created and belonging to the Bridge instance;

or the MAC address table entry in the first MAC address group comprises the MAC address table entry belonging to the created Bridge instance.

In an embodiment of the present application, the deleting the MAC address table entry in the second MAC address group specifically includes:

determining MAC address table entries of a common VLAN in the first MAC address group and the second MAC address group;

and deleting the MAC address table entry of the common VLAN in the second MAC address table entry.

In an embodiment of the present application, the obtaining a first numerical value of a MAC address entry in a first MAC address group and a second numerical value of a MAC address entry in a second MAC address group specifically includes:

the method comprises the steps of obtaining a first numerical value of an MAC address table entry in a first MAC address group and a second numerical value of an MAC address table entry in a second MAC address group in a fixed time;

the deleting the MAC address table entry of the common VLAN in the second MAC address table entry specifically includes:

selecting a VLAN from the common VLANs;

and deleting the MAC address table entry of the selected VLAN in the second MAC address table entry.

In another aspect, an embodiment of the present application provides an address table entry processing apparatus, where the apparatus includes:

an obtaining unit, configured to obtain a first quantity value of a MAC address table entry in a first MAC address group and a second quantity value of a MAC address table entry in a second MAC address group, where the MAC address table entry in the first MAC address group belongs to a Bridge instance, and the MAC address table entry in the second MAC address group does not belong to the Bridge instance;

the judging unit is used for judging whether the sum of the first numerical value and the second numerical value reaches the upper limit value of the number of preset MAC address table items;

and the deleting unit is used for deleting the MAC address table entry in the second MAC address group if the sum value reaches the upper limit value of the number of the preset MAC address table entries.

In one embodiment of the present application, the apparatus further comprises:

a receiving unit, configured to receive an instance control instruction, where the instance control instruction includes a correspondence between a target Bridge instance and a target VLAN to be added to the target Bridge instance;

an adding unit, configured to add the target VLAN to the target Bridge instance according to the correspondence;

a learning unit for learning the MAC address in the target VLAN;

and the creating unit is used for creating the MAC address table item belonging to the target Bridge instance according to the learned MAC address in the target VLAN when the MAC address table item in the second MAC address group is deleted.

In an embodiment of the application, the adding unit is specifically configured to:

In an embodiment of the present application, the deleting unit is specifically configured to:

In an embodiment of the application, the obtaining unit is specifically configured to:

the deleting unit is specifically configured to:

selecting a VLAN from the common VLANs; and deleting the MAC address table entry of the selected VLAN in the second MAC address table entry.

In another aspect, an embodiment of the present application provides a network device, which includes a processor and a machine-readable storage medium, where the machine-readable storage medium stores machine-executable instructions capable of being executed by the processor, and the processor is caused by the machine-executable instructions to implement the above address table entry processing method.

In a fourth aspect, embodiments of the present application provide a machine-readable storage medium storing machine-executable instructions that, when invoked and executed by a processor, cause the processor to implement the above-mentioned address table entry processing method.

In the embodiment of the application, if the network device determines that the sum of the number of the MAC address table entries not belonging to the Bridge instance and the number of the MAC address table entries belonging to the Bridge instance reaches the preset upper limit value of the number of the MAC address table entries, the network device deletes the MAC address table entries not belonging to the Bridge instance, reduces the MAC address table entries already created in the network device, enables the network device to continuously learn the MAC address, creates the MAC address table entries belonging to the Bridge instance, reduces the possibility of unknown unicast flooding, and improves the reliability of the service forwarding system. Of course, it is not necessary for any product or method of the present application to achieve all of the above-described advantages at the same time.

Drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.

Fig. 1 is a schematic flowchart of an address table entry processing method according to an embodiment of the present application;

fig. 2 is a schematic flowchart of an address learning method according to an embodiment of the present application;

fig. 3 is a schematic diagram of a first structure of an address table entry processing apparatus according to an embodiment of the present application;

fig. 4 is a schematic structural diagram of a second address table entry processing apparatus according to an embodiment of the present application;

fig. 5 is a schematic structural diagram of a network device according to an embodiment of the present application.

Detailed Description

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

The network device separately learns the MAC address belonging to the Bridge instance and the MAC address not belonging to the Bridge instance, e.g., the network device learns the MAC address within VLAN1, creates a MAC address table entry not belonging to the Bridge instance and including the MAC address within VLAN 1; when a Bridge instance is created and VLAN1 is added to the Bridge instance, the network device relearns the MAC address within VLAN1, creates a MAC address table entry belonging to the Bridge instance and including the MAC address within VLAN 1; after deleting the Bridge instance, if there is no MAC address entry that does not belong to the Bridge instance and includes a MAC address within VLAN1, then the MAC address within VLAN1 is relearned and a MAC address entry that does not belong to the Bridge instance and includes a MAC address within VLAN1 is created.

In practical application, when learning the MAC address belonging to the Bridge instance is not completed, the total number of learned MAC addresses in the network device reaches the configured upper limit value, but the messages sent by the user devices in each VLAN in the Bridge instance are all forwarded based on the MAC address belonging to the Bridge instance. In this case, unknown unicast flooding is likely to occur, which further affects the reliability of the service forwarding system.

In order to reduce the possibility of unknown unicast flooding and improve the reliability of a service forwarding system, embodiments of the present application provide a method and an apparatus for processing an address table entry. Referring to fig. 1, fig. 1 is a schematic flowchart of an address table entry processing method according to an embodiment of the present disclosure, where the address table entry processing method may be applied to network devices such as a firewall device, a router, and a switch. Specifically, the method comprises the following steps:

step 101: a first numerical value of MAC address table entries in a first MAC address group and a second numerical value of MAC address table entries in a second MAC address group are obtained.

And the MAC address table entry in the first MAC address group belongs to the Bridge instance, and the MAC address table entry in the second MAC address group does not belong to the Bridge instance. The first MAC address group and the second MAC address group may be located in the same MAC address table, or may be located in two different MAC address tables, which is not limited in this embodiment of the present application.

Here, the MAC address table entry belonging to the Bridge instance is used for forwarding a cross-VLAN packet; MAC address table entries not belonging to Bridge instances are used for forwarding messages within the VLAN.

In one embodiment of the present application, the MAC address table entry in the first MAC address group includes a MAC address table entry belonging to a Bridge instance to be created and a MAC address table entry belonging to a Bridge instance already created. The network device considers the MAC address table items belonging to the Bridge instance to be created and created at the same time, so that the network device can estimate the number of the MAC address table items belonging to the Bridge instance after a period of time, further estimate the total number of the local MAC address table items of the network device after a period of time, and facilitate the network device to process the MAC address table items not belonging to the Bridge instance.

For example, there are currently Bridge instances 1, VLAN 2, VLAN3, VLAN4, and VLAN 5; bridge instance 1 comprises VLAN1 and VLAN 2; after the Bridge instance 1 is created for a period of time, determining that the creation of the MAC address table entry belonging to the Bridge instance 1 is finished; at this time, the created MAC address table entry includes:

the MAC address table entry that does not belong to the Bridge instance and includes the MAC address in VLAN1 has 500;

the MAC address table entry that does not belong to the Bridge instance and includes the MAC address in VLAN 2 has 500;

the MAC address table entry that does not belong to the Bridge instance and includes the MAC address within VLAN3 has 700;

the MAC address table entry that does not belong to the Bridge instance and includes the MAC address within VLAN4 has 800;

the MAC address table entry that does not belong to the Bridge instance and includes the MAC address within VLAN5 has 500;

the MAC address table entry belonging to Bridge instance 1 and comprising MAC addresses within VLAN1 and VLAN 2 has 900.

It can be understood that, in practical applications, the network environment changes, and the user equipment on line in the VLAN changes continuously, which causes the MAC address in the Bridge instance learned by the network equipment to change, so that the MAC address table entry created by the network equipment changes accordingly. In this example, the MAC address table entry belonging to Bridge instance 1 and including the MAC addresses in VLAN1 and VLAN 2 can also be learned by the network device according to the actual network environment, and is only described as 900.

At this point, a second numeric value, i.e., 3000 out of the number of MAC address table entries that do not belong to a Bridge instance, may be determined.

After the Bridge instance 2 is created again, the Bridge instance 2 comprises VLAN3 and VLAN4, and MAC address table entries which do not belong to the Bridge instance and comprise MAC addresses in VLAN3 and VLAN4, that is, the MAC address table entry to be created which belongs to the Bridge instance has a value of 800+ 700-1500; having created a MAC address entry belonging to the Bridge instance, i.e. a MAC address entry belonging to Bridge instance 1, having 900, it can be determined that the first quantity value is 1500+900 ═ 2300.

In one embodiment of the present application, the MAC address entry in the first MAC address group comprises a MAC address entry belonging to the created Bridge instance. At this time, the network device periodically obtains a first numerical value of the MAC address table entries in the first MAC address group and a second numerical value of the MAC address table entries in the second MAC address group. The network device may determine whether to delete a MAC address entry not belonging to the Bridge instance according to the number of MAC address entries in the current network device. Therefore, the network equipment is adaptive to the change of the network environment, the problems that the network equipment learns again and creates the MAC address table entry which does not belong to the Bridge instance when the Bridge instance is deleted due to excessive deletion of the MAC address table entry which does not belong to the Bridge instance are solved, and the network resources are saved.

Still by way of example, when creating Bridge instance 2, the number of MAC address entries belonging to Bridge instance 2 may be periodically obtained;

if the number of the MAC address table entries belonging to the Bridge instance 2 is obtained as 400, determining that the sum of the number of the created MAC address table entries belonging to the Bridge instance, namely the created MAC address table entries belonging to the Bridge instance 1 and the created MAC address table entries belonging to the Bridge instance 2 is 900+ 400-1300, namely the first quantity value is 1300;

if the number of the MAC address table entries belonging to the Bridge instance 2 is obtained as 600, it is determined that the sum of the number of the created MAC address table entries belonging to the Bridge instance, that is, the created MAC address table entries belonging to the Bridge instance 1 and the created MAC address table entries belonging to the Bridge instance 2 is 900+600 to 1500, that is, the first quantity value is 1500.

Step 102: judging whether the sum of the first numerical value and the second numerical value reaches the upper limit value of the number of the preset MAC address table items; if so, executing step 103; if not, no processing is performed.

Here, the preset upper limit value of the number of MAC address table entries may be the total number of MAC address table entries that the network device can store; it may also be a value that is less than the total number of MAC address table entries that the network device is capable of storing, but is very close to the total number of MAC address table entries that the network device is capable of storing, to ensure that the network device is still able to learn MAC addresses and create MAC address table entries that belong to a Bridge instance during the period of time that MAC address table entries that do not belong to a Bridge instance are deleted.

For example, if the total number of MAC address table entries that can be stored by the network device is 4096, the preset upper limit value of the number of MAC address table entries may be 4000, 4050, 4060, 4096, or the like.

Step 103: and deleting the MAC address table entry in the second MAC address group.

In an embodiment of the present application, to reduce the operation complexity, when the network device deletes all MAC address table entries in the second MAC address group, that is, deletes MAC address table entries that do not belong to a Bridge instance, the network device may delete all MAC address table entries that do not belong to a Bridge instance.

As in the above example, upon determining that the upper limit value of the preset number of MAC address entries is reached, the network device deletes the MAC address entries that do not belong to the Bridge instance and that include MAC addresses within VLAN1, VLAN 2, VLAN3, VLAN4, and VLAN 5.

In an embodiment of the application, in order to adapt to changes in a network environment, reduce the influence on the VLANs that are not added to the Bridge instance, save network resources, and avoid the problem that when the Bridge instance is deleted due to excessive deletion of MAC address table entries that do not belong to the Bridge instance, the network device learns and creates MAC address table entries that do not belong to the Bridge instance again, the network device may determine MAC address table entries of a common VLAN in the first MAC address group and the second MAC address group. And the network equipment deletes the MAC address table entry of the common VLAN in the second MAC address table entry, namely the network equipment deletes the MAC address table entry which does not belong to the Bridge instance and comprises the MAC address added to the VLAN in the Bridge instance.

As in the above example, VLAN1, VLAN 2, VLAN3, VLAN4 are in the Bridge instance and VLAN5 is not in the Bridge instance, the MAC address entries of the first MAC address group are MAC address entries belonging to Bridge and including MAC addresses within VLAN1, VLAN 2, VLAN3, VLAN4, and the MAC address entries of the second MAC address group are MAC address entries not belonging to Bridge and including MAC addresses within VLAN1, VLAN 2, VLAN3, VLAN4 and VLAN 5.

The common VLAN in the first MAC address group and the second MAC address group is VLAN1, VLAN 2, VLAN3 and VLAN4, and the MAC address table entry of the common VLAN is the MAC address table entry comprising the MAC addresses in the VLAN1, VLAN 2, VLAN3 and VLAN 4; and when the upper limit value of the number of the MAC address table entries is determined to be reached, deleting the MAC address table entries which do not belong to the Bridge instance and comprise the MAC addresses in VLAN1, VLAN 2, VLAN3 and VLAN 4.

In an embodiment of the application, in order to further adapt to changes of a network environment, reduce the influence on the VLAN which is not added to the Bridge instance, and at the same time, save network resources, and avoid the problem that when the Bridge instance is deleted due to excessive deletion of MAC address table entries which do not belong to the Bridge instance, the network device learns and creates MAC address table entries which do not belong to the Bridge instance again, the network device may delete MAC address table entries which do not belong to the Bridge instance and include MAC addresses added to the VLAN in the Bridge instance one by one.

Specifically, the network device may obtain a first numerical value of an MAC address table entry in the first MAC address group and a second numerical value of an MAC address table entry in the second MAC address group at regular time;

if the upper limit value of the number of the preset MAC address table entries is determined to be reached when the first number value of the MAC address table entries in the first MAC address group and the second number value of the MAC address table entries in the second MAC address group are obtained once, the network device determines the MAC address table entries of the common VLAN in the first MAC address group and the second MAC address group. And the network equipment selects one VLAN from the common VLANs and deletes the MAC address table entry of the selected VLAN in the second MAC address group, namely deletes the MAC address table entry which does not belong to the Bridge instance and comprises the MAC address in the selected VLAN.

As in the above example, VLAN1, VLAN 2, VLAN3, VLAN4 are in the Bridge instance and VLAN5 is not. The MAC address table entry of the first MAC address group is a MAC address table entry which belongs to Bridge and comprises MAC addresses in VLAN1, VLAN 2, VLAN3 and VLAN4, and the MAC address table entry of the second MAC address group is a MAC address table entry which does not belong to Bridge and comprises MAC addresses in VLAN1, VLAN 2, VLAN3, VLAN4 and VLAN 5. The common VLAN in the first MAC address group and the second MAC address group is VLAN1, VLAN 2, VLAN3 and VLAN4, and the MAC address table entry of the common VLAN is the MAC address table entry comprising the MAC addresses in the VLAN1, VLAN 2, VLAN3 and VLAN 4.

When the upper limit value of the number of the MAC address table entries is determined to be reached, the network equipment selects one VLAN from VLAN1, VLAN 2, VLAN3 and VLAN 4. For example, the network device selects VLAN1, deletes MAC address table entries that do not belong to the Bridge instance and include MAC addresses within VLAN 1.

At this time, the common VLAN in the first MAC address group and the second MAC address group is VLAN 2, VLAN3, and VLAN4, and the MAC address table entry of the common VLAN is a MAC address table entry including MAC addresses in VLAN 2, VLAN3, and VLAN 4.

When the upper limit value of the preset MAC address table entry is determined to be reached again, the network device selects one VLAN from the VLANs 2, 3 and 4 again. For example, VLAN 2 is selected and MAC address table entries that do not belong to the Bridge instance and include MAC addresses within VLAN 2 are deleted.

In an embodiment of the present application, in order to facilitate management of MAC address table entries belonging to Bridge instances, a VLAN list for recording VLANs in each Bridge instance may be set on a network device. After receiving an instance control instruction, such as an instance creation instruction, an instance addition instruction, and the like, the network device detects whether the VLAN list records a corresponding relationship between a target Bridge instance and a target VLAN included in the instance control instruction. If yes, no treatment is carried out; and if the target Bridge instance does not exist, adding the corresponding relation between the target Bridge instance and the target VLAN included in the instance control instruction into the VLAN list.

When deleting the MAC address entry in the second MAC address group, that is, deleting the MAC address entry that does not belong to the Bridge instance and includes the MAC address in the VLAN under the Bridge instance, the network device may determine the VLAN in the VLAN list as the common VLAN, and then delete the MAC address entry that does not belong to the Bridge instance and includes the MAC address in the VLAN list.

In this embodiment, a monitor may be set on the network device, where the monitor is configured to monitor the VLANs added in the VLAN list, and monitor whether the total number of created MAC address table entries reaches an upper limit value of the preset number of MAC address table entries. Here, the monitor may be implemented by a physical device, or may be implemented by software simulation, which is not limited in the embodiment of the present application.

By applying the embodiment, if the network equipment determines that the sum of the number of the MAC address table entries not belonging to the Bridge instance and the number of the MAC address table entries belonging to the Bridge instance reaches the preset upper limit value of the number of the MAC address table entries, the network equipment deletes the MAC address table entries not belonging to the Bridge instance, reduces the MAC address table entries already created in the network equipment, enables the network equipment to continuously learn the MAC addresses, creates the MAC address table entries belonging to the Bridge instance, reduces the possibility of unknown unicast flooding, and improves the reliability of the service forwarding system.

Based on the above address table item processing method, when the network device performs the address learning method, referring to fig. 2, fig. 2 is a schematic flow chart of the address learning method provided in the embodiment of the present application, and is applied to the network device, the method includes:

step 201: and receiving an instance control instruction, wherein the instance control instruction comprises the corresponding relation between the target Bridge instance and the target VLAN to be added into the target Bridge instance.

In one embodiment of the present application, the instance control instruction may be an instance creation instruction, or an instance addition instruction. The instance creating instruction is used for instructing the network equipment to create a target Bridge instance; the instance add instruction is to instruct the network device to add the target VLAN to the target Bridge instance.

In an embodiment of the present application, after receiving the instance control instruction, the network device may obtain a first numerical value of MAC address table entries in the first MAC address group and a second numerical value of MAC address table entries in the second MAC address group, and determine whether to delete a MAC address table entry in the second MAC address group, so as to ensure that a complete MAC address table entry of a MAC address in a target VLAN can be created.

In another embodiment of the present application, the network device learns the MAC address in the target VLAN and creates a MAC address table entry belonging to the target Bridge instance within a period of time after receiving the instance control instruction. In the time period, the network device may obtain the first numerical value and the second numerical value at regular time, so as to periodically judge whether the sum of the first numerical value and the second numerical value reaches the upper limit value of the number of the preset MAC address table entries, thereby ensuring that the network device timely and accurately obtains the total number of the created MAC address table entries of the network device.

In an embodiment of the present application, in order to facilitate management of MAC address table entries belonging to Bridge instances, a VLAN list for recording VLANs in each Bridge instance may be set on a network device. After receiving the instance control instruction, the network device detects whether the VLAN list records the corresponding relation between the target Bridge instance and the target VLAN included in the instance control instruction; if yes, no treatment is carried out; and if the target Bridge instance does not exist, adding the corresponding relation between the target Bridge instance and the target VLAN included in the instance control instruction into the VLAN list.

Step 202: and adding the target VLAN into the target Bridge instance according to the corresponding relation included in the instance control instruction.

In one embodiment of the present application, the instance control instruction received by the network device is an instance creation instruction. And after receiving the instance creating instruction, the network equipment creates a target Bridge instance according to the corresponding relation between the target Bridge instance and the target VLAN included in the instance creating instruction, and adds the target VLAN to the target Bridge instance. Here, the target VLAN corresponding to the target Bridge instance carried by the instance creation instruction may be multiple, that is, the target VLAN added to the target Bridge instance may include multiple target VLANs.

In another embodiment of the present application, the instance control instruction received by the network device is an instance add instruction. And after receiving the instance adding instruction, the network equipment adds the target VLAN into the target Bridge instance according to the corresponding relation between the target Bridge instance and the target VLAN included in the instance adding instruction. Here, the target VLAN corresponding to the target Bridge instance carried by the instance adding instruction may be multiple, that is, the target VLAN added to the target Bridge instance may include multiple target VLANs.

Step 203: the MAC address within the target VLAN is learned.

Step 204: and creating an MAC address table item belonging to the target Bridge instance according to the MAC address in the target VLAN obtained by learning.

After learning the MAC address in the target VLAN, if it is determined that the sum of the number of MAC address table entries not belonging to the Bridge instance and the number of MAC address table entries belonging to the Bridge instance does not reach the upper limit of the preset number of MAC address table entries, the network device may create the MAC address table entry belonging to the target Bridge instance according to the learned MAC address in the target VLAN, that is, create and store the MAC address table entry belonging to the target Bridge instance, where the MAC address table entry belonging to the target Bridge instance belongs to the first MAC address group.

After learning the MAC address in the target VLAN, if the sum of the number of the MAC address table entries not belonging to the Bridge instance and the number of the MAC address table entries belonging to the Bridge instance is determined to reach the upper limit value of the number of the preset MAC address table entries, deleting the MAC address table entries in the second MAC address group, and then creating the MAC address table entries belonging to the target Bridge instance according to the learned MAC address in the target VLAN.

Thus, after receiving the message from the target VLAN, the network device can perform cross-VLAN forwarding based on the MAC address table entry under the target Bridge instance.

In the embodiment of the application, the network equipment acquires the number of the MAC address table entries which do not belong to the Bridge instance and the number of the MAC address table entries which belong to the Bridge instance. When the sum of the number of the MAC address table entries not belonging to the Bridge instance and the number of the MAC address table entries belonging to the Bridge instance is determined to reach the preset upper limit value of the number of the MAC address table entries, the network equipment deletes the MAC address table entries not belonging to the Bridge instance so as to reduce the MAC address table entries already created in the network equipment, ensure that the network equipment can create the MAC address table entries belonging to the Bridge instance, reduce the possibility of unknown unicast flooding and improve the reliability of a service forwarding system.

And when the network equipment receives the instance deletion instruction aiming at the target Bridge instance, deleting the target Bridge instance, and deleting the MAC address table entry which belongs to the target Bridge instance and comprises the MAC address in the target VLAN. Thus, after receiving the message from the target VLAN, the network device can carry out the VLAN forwarding based on the MAC address table entry which does not belong to the Bridge instance.

In an embodiment of the application, if a VLAN list for recording VLANs under each Bridge instance is set on a network device, when a MAC address in a target VLAN is learned, according to a corresponding relationship between a target Bridge instance and a target VLAN recorded in the VLAN list, a MAC address entry including the MAC address in the target VLAN is created under the target Bridge instance, so that creation of a MAC address entry belonging to the target Bridge instance is realized;

when an instance deletion instruction for the target Bridge instance is received, the target VLAN corresponding to the target Bridge instance can be determined from the VLAN list, the target Bridge instance can be deleted, and the MAC address entry belonging to the target Bridge instance and including the MAC address in the target VLAN determined from the VLAN list can be deleted, thereby achieving deletion of the MAC address entry belonging to the target Bridge instance.

Corresponding to the embodiments of the address table item processing method and the address learning method, the embodiment of the application also provides an address table item processing device. Referring to fig. 3, fig. 3 is a schematic structural diagram of an address table entry processing apparatus according to an embodiment of the present application, applied to a network device, where the apparatus includes:

an obtaining unit 301, configured to obtain a first quantity value of a MAC address entry in a first MAC address group and a second quantity value of a MAC address entry in a second MAC address group, where the MAC address entry in the first MAC address group belongs to a Bridge instance, and the MAC address entry in the second MAC address group does not belong to the Bridge instance;

a determining unit 302, configured to determine whether a sum of the first numerical value and the second numerical value reaches an upper limit of a preset number of MAC address table entries;

a deleting unit 303, configured to delete the MAC address table entry in the second MAC address group if the sum reaches an upper limit value of the preset number of MAC address table entries.

In an embodiment of the present application, the second structural diagram of the address table entry processing apparatus shown in fig. 4 is applied to a network device based on fig. 3, and the apparatus further includes:

a receiving unit 304, configured to receive an instance control instruction, where the instance control instruction includes a correspondence between a target Bridge instance and a target VLAN to be added to the target Bridge instance;

an adding unit 305, configured to add the target VLAN to the target Bridge instance according to the corresponding relationship included in the instance control instruction;

a learning unit 306 for learning a MAC address within a target VLAN;

and the creating unit 307 is configured to create a MAC address table entry belonging to the target Bridge instance according to the learned MAC address in the target VLAN.

In an embodiment of the present application, the adding unit 305 may specifically be configured to:

if the instance control instruction is an instance creating instruction, creating a target Bridge instance, and adding the target VLAN into the target Bridge instance;

and if the instance control instruction is an instance adding instruction, adding the target VLAN to the target Bridge instance.

alternatively, the MAC address entry in the first MAC address group comprises a MAC address entry belonging to the created Bridge instance.

In an embodiment of the present application, the deleting unit 303 may be specifically configured to:

determining MAC address table entries of a common VLAN in a first MAC address group and a second MAC address group;

and deleting the MAC address table items of the common VLAN in the second MAC address table items.

In an embodiment of the present application, the obtaining unit 301 may be specifically configured to:

the deleting unit 303 may specifically be configured to:

By applying the embodiment of the application, if the network equipment determines that the sum of the number of the MAC address table entries not belonging to the Bridge instance and the number of the MAC address table entries belonging to the Bridge instance reaches the preset upper limit value of the number of the MAC address table entries, the network equipment deletes the MAC address table entries not belonging to the Bridge instance, reduces the MAC address table entries established in the network equipment, enables the network equipment to continuously learn the MAC addresses and establish the MAC address table entries belonging to the Bridge instance, reduces the possibility of unknown unicast flooding, and improves the reliability of a service forwarding system.

Corresponding to the embodiments of the address table item processing method and the address learning method, an embodiment of the present application further provides a network device, including a processor and a machine-readable storage medium, where the machine-readable storage medium stores machine-executable instructions capable of being executed by the processor, and the processor is caused by the machine-executable instructions to implement the above-mentioned address table item processing method and the address learning method.

As shown in fig. 5, the network device includes a processor 501 and a machine-readable storage medium 502, where the machine-readable storage medium 502 stores machine-executable instructions that can be executed by the processor 501.

In addition, as shown in fig. 5, the network device may further include: a communication interface 503 and a communication bus 504; the processor 501, the machine-readable storage medium 502, and the communication interface 503 are configured to complete communication with each other through the communication bus 504, and the communication interface 503 is configured to communicate with other devices through the network device.

In an embodiment of the application, the machine executable instructions include: an acquisition instruction 512, a judgment instruction 522, and a deletion instruction 532;

the processor fetched instructions 512 cause the implementation of: acquiring a first numerical value of an MAC address table entry in a first MAC address group and a second numerical value of an MAC address table entry in a second MAC address group, wherein the MAC address table entry in the first MAC address group belongs to a Bridge instance, and the MAC address table entry in the second MAC address group does not belong to the Bridge instance;

the processor determined instructions 522 cause implementation of: judging whether the sum of the first numerical value and the second numerical value reaches the upper limit value of the number of the preset MAC address table items;

the processor deleted instructions 532 cause the implementation of: and if the sum value reaches the upper limit value of the number of the preset MAC address table entries, deleting the MAC address table entries in the second MAC address group.

In one embodiment of the present application, the machine-executable instructions may further comprise: receiving an instruction, an adding instruction, a learning instruction and a creating instruction;

the processor being received instructions to cause implementation of: receiving an instance control instruction, wherein the instance control instruction comprises a corresponding relation between a target Bridge instance and a target VLAN to be added into the target Bridge instance;

the processor is added with instructions to enable: adding the target VLAN into the target Bridge instance according to the corresponding relation included by the instance control instruction;

the processor is caused by the learning instructions to implement: learning the MAC address in the target VLAN;

the processor is created with instructions to cause: and when the MAC address table entry in the second MAC address group is deleted, creating the MAC address table entry belonging to the target Bridge instance according to the MAC address in the target VLAN obtained by learning.

In one embodiment of the application, the processor is provided with instructions that cause the following to be implemented:

In one embodiment of the present application, the processor-deleted instructions 532 cause specific implementations to be made:

In one embodiment of the present application, the processor being instructed to fetch 512 causes particular implementations to:

the processor deleted instructions 532 cause specific implementations to be made:

The communication bus 504 may be a PCI (Peripheral Component Interconnect) bus, an EISA (Extended Industry Standard Architecture) bus, or the like. The communication bus 504 may be divided into an address bus, a data bus, a control bus, etc. For ease of illustration, only one thick line is shown in FIG. 5, but this is not intended to represent only one bus or type of bus.

The machine-readable storage medium 502 may include a RAM (Random Access Memory) and may also include a NVM (Non-Volatile Memory), such as at least one disk Memory. Additionally, the machine-readable storage medium 502 may also be at least one memory device located remotely from the aforementioned processor.

The Processor 501 may be a general-purpose Processor including a CPU (Central Processing Unit), an NP (Network Processor), and the like; but also DSPs (Digital Signal Processing), ASICs (Application Specific Integrated circuits), FPGAs (Field Programmable Gate arrays) or other Programmable logic devices, discrete Gate or transistor logic devices, discrete hardware components.

Corresponding to the embodiments of the address table item processing method and the address learning method, embodiments of the present application further provide a machine-readable storage medium, where the machine-readable storage medium stores machine-executable instructions capable of being executed by a processor, and when the machine-executable instructions are called and executed by the processor, the machine-executable instructions cause the processor to implement the above-mentioned address table item processing method and the address learning method.

In an embodiment of the application, the machine executable instructions include: acquiring an instruction, judging the instruction and deleting the instruction;

when invoked and executed by a processor, the fetch instructions cause the processor to: acquiring a first numerical value of an MAC address table entry in a first MAC address group and a second numerical value of an MAC address table entry in a second MAC address group, wherein the MAC address table entry in the first MAC address group belongs to a Bridge instance, and the MAC address table entry in the second MAC address group does not belong to the Bridge instance;

when invoked and executed by a processor, the decision instructions cause the processor to: judging whether the sum of the first numerical value and the second numerical value reaches the upper limit value of the number of the preset MAC address table items;

when invoked and executed by a processor, the delete instruction causes the processor to: and if the sum value reaches the upper limit value of the number of the preset MAC address table entries, deleting the MAC address table entries in the second MAC address group.

when invoked and executed by a processor, receiving instructions cause the processor to: receiving an instance control instruction, wherein the instance control instruction comprises a corresponding relation between a target Bridge instance and a target VLAN to be added into the target Bridge instance;

when invoked and executed by a processor, add instructions cause the processor to: adding the target VLAN into the target Bridge instance according to the corresponding relation included by the instance control instruction;

when invoked and executed by a processor, the learning instructions cause the processor to: learning the MAC address in the target VLAN;

when invoked and executed by a processor, the create instructions cause the processor to: and when the MAC address table entry in the second MAC address group is deleted, creating the MAC address table entry belonging to the target Bridge instance according to the MAC address in the target VLAN obtained by learning.

In one embodiment of the application, when invoked and executed by a processor, the addition of instructions causes the processor to specifically implement:

In one embodiment of the present application, the delete instruction, when invoked and executed by a processor, causes the processor to specifically implement:

In one embodiment of the present application, the fetch instructions, when invoked and executed by a processor, cause the processor to implement in particular:

when invoked and executed by a processor, the delete instruction causes the processor to implement:

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. Especially, for the embodiments of the address table item processing apparatus, the network device, and the machine-readable storage medium, since they are substantially similar to the embodiments of the address table item processing method and the address learning method, the description is relatively simple, and relevant points can be referred to the partial description of the embodiments of the address table item processing method and the address learning method.

The above description is only for the preferred embodiment of the present application, and is not intended to limit the scope of the present application. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present application are included in the protection scope of the present application.

Claims

1. An address table entry processing method, applied to a network device, the method comprising:

acquiring a first numerical value of an MAC address table entry in a first Media Access Control (MAC) address group and a second numerical value of an MAC address table entry in a second MAC address group, wherein the MAC address table entry in the first MAC address group belongs to a Bridge instance, and the MAC address table entry in the second MAC address group does not belong to the Bridge instance;

2. The method of claim 1, further comprising:

receiving an instance control instruction, wherein the instance control instruction comprises a corresponding relation between a target Bridge instance and a target Virtual Local Area Network (VLAN) to be added into the target Bridge instance;

learning the MAC address within the target VLAN;

3. The method of claim 2, wherein the adding the target VLAN to the target Bridge instance specifically comprises:

4. The method according to claim 1 or 2, wherein the MAC address table entry in the first MAC address group comprises a MAC address table entry belonging to a Bridge instance to be created and a created MAC address table entry belonging to a Bridge instance;

5. The method according to claim 1 or 2, wherein the deleting the MAC address table entry in the second MAC address group specifically includes:

6. The method of claim 5, wherein the obtaining a first quantity value of MAC address table entries in a first MAC address group and a second quantity value of MAC address table entries in a second MAC address group comprises:

selecting a VLAN from the common VLANs;

7. An address table entry processing apparatus, applied to a network device, the apparatus comprising:

8. The apparatus of claim 7, further comprising:

a receiving unit, configured to receive an instance control instruction, where the instance control instruction includes a correspondence between a target Bridge instance and a target virtual local area network VLAN to be added to the target Bridge instance;

a learning unit for learning the MAC address in the target VLAN;

9. The apparatus according to claim 8, wherein the adding unit is specifically configured to:

10. The apparatus according to claim 7 or 8,

the MAC address table entry in the first MAC address group comprises the MAC address table entry to be created and belonging to the Bridge instance and the created MAC address table entry belonging to the Bridge instance;

11. The apparatus according to claim 7 or 8, wherein the deleting unit is specifically configured to:

12. The apparatus according to claim 11, wherein the obtaining unit is specifically configured to:

the deleting unit is specifically configured to: