CN109104353B

CN109104353B - Data transmission method and device

Info

Publication number: CN109104353B
Application number: CN201811110659.7A
Authority: CN
Inventors: 王春磊
Original assignee: New H3C Security Technologies Co Ltd
Current assignee: New H3C Security Technologies Co Ltd
Priority date: 2018-09-21
Filing date: 2018-09-21
Publication date: 2021-04-30
Anticipated expiration: 2038-09-21
Also published as: CN109104353A

Abstract

The application provides a method and a device for data transmission, which relate to the technical field of communication, wherein the method is applied to first network equipment and comprises the following steps: receiving a first message, wherein the first message carries a destination Media Access Control (MAC) address and an identifier of a first Virtual Local Area Network (VLAN), inquiring a VLAN list containing the identifier of the first VLAN, wherein the VLAN list contains the identifier of the first VLAN and at least one identifier of a second VLAN, modifying the identifier of the first VLAN in the first message into the identifier of the second VLAN if the VLAN list containing the identifier of the first VLAN is inquired, and sending the modified first message according to the destination MAC address and the identifier of the second VLAN. By adopting the method and the device, communication among the user terminals in different VLANs can be realized.

Description

Data transmission method and device

Technical Field

The present application relates to the field of communications technologies, and in particular, to a method and an apparatus for data transmission.

Background

Currently, in a Local Area Network (LAN), technicians usually implement isolation between user terminals by using a Virtual Local Area Network (VLAN) technology.

In the prior art, when a user terminal needs to perform communication, the user terminal sends a first message to a switch, where the first message carries a destination MAC (Media Access Control) address. After the switch receives the first message, the switch may determine the VLAN to which the input interface of the first message belongs, and add the tag of the VLAN to the first message. The switch then forwards the first packet within the VLAN.

Based on the prior art, different VLANs are isolated from each other, that is, user terminals in different VLANs cannot communicate with each other.

Disclosure of Invention

An object of the embodiments of the present application is to provide a method and an apparatus for data transmission, which can implement communication between user terminals in different VLANs. The specific technical scheme is as follows:

in a first aspect, a method for data transmission is provided, where the method is applied to a first network device, and the method includes:

receiving a first message, wherein the first message carries a destination Media Access Control (MAC) address and an identifier of a first Virtual Local Area Network (VLAN);

querying a VLAN list containing the identification of the first VLAN, wherein the VLAN list contains the identification of the first VLAN and the identification of at least one second VLAN;

if the VLAN list containing the identification of the first VLAN is inquired, the identification of the first VLAN in the first message is modified into the identification of the second VLAN, and the modified first message is sent according to the destination MAC address and the identification of the second VLAN.

Optionally, the method further includes:

if a VLAN list containing the identification of the first VLAN is not inquired, an interface corresponding to the destination MAC address and the identification of the first VLAN is inquired in a pre-generated MAC forwarding table;

if the interface corresponding to the destination MAC address and the identifier of the first VLAN is inquired, the first message is sent to the second network equipment corresponding to the destination MAC address through the interface corresponding to the destination MAC address and the identifier of the first VLAN;

and if the interface corresponding to the destination MAC address and the identifier of the first VLAN is not inquired, broadcasting the first message to the interface divided into the first VLAN.

Optionally, the modifying the identifier of the first VLAN in the first message to the identifier of the second VLAN, and sending the modified first message according to the destination MAC address and the identifier of the second VLAN includes:

inquiring an identifier of a third VLAN corresponding to the destination MAC address in a pre-generated MAC forwarding table, wherein the third VLAN is one of the second VLANs;

if the identifier of the third VLAN corresponding to the destination MAC address is not inquired, the identifier of the first VLAN in the first message is modified into the identifier of the second VLAN, and the modified first message is sent according to the destination MAC address and the identifier of the second VLAN.

Optionally, the method further includes:

and if the identifier of a third VLAN corresponding to the destination MAC address is inquired, modifying the identifier of the first VLAN in the first message into the identifier of the third VLAN, and sending the modified first message to second network equipment corresponding to the destination MAC address through an interface corresponding to the destination MAC address and the identifier of the third VLAN.

Optionally, the sending, according to the destination MAC address and the identifier of the second VLAN, the modified first packet is processed, including:

inquiring an interface corresponding to the destination MAC address and the identifier of the second VLAN in a pre-generated MAC forwarding table;

if the interfaces corresponding to the destination MAC address and the identifier of the second VLAN are inquired, the first message is sent to the network equipment corresponding to the destination MAC address through the interfaces corresponding to the destination MAC address and the identifier of the second VLAN;

and if the interface corresponding to the destination MAC address and the identifier of the second VLAN is not inquired, broadcasting the first message to the interface divided into the second VLAN.

In a second aspect, an apparatus for data transmission is provided, where the apparatus is applied to a first network device, and the apparatus includes:

the receiving module is used for receiving a first message, wherein the first message carries a destination Media Access Control (MAC) address and an identifier of a first Virtual Local Area Network (VLAN);

a first query module, configured to query a VLAN list including an identifier of the first VLAN, where the VLAN list includes the identifier of the first VLAN and an identifier of at least one second VLAN;

and the first sending module is used for modifying the identifier of the first VLAN in the first message into the identifier of the second VLAN if a VLAN list containing the identifier of the first VLAN is inquired, and sending the modified first message according to the destination MAC address and the identifier of the second VLAN.

Optionally, the apparatus further comprises:

a second query module, configured to query, in a pre-generated MAC forwarding table, an interface corresponding to the destination MAC address and the identifier of the first VLAN if a VLAN list including the identifier of the first VLAN is not queried;

a second sending module, configured to send the first packet to a second network device corresponding to the destination MAC address through an interface corresponding to the destination MAC address and the identifier of the first VLAN if an interface corresponding to the destination MAC address and the identifier of the first VLAN is found;

and the broadcasting module is used for broadcasting the first message to the interfaces divided into the first VLAN if the interfaces corresponding to the destination MAC address and the identifier of the first VLAN are not inquired.

Optionally, the first sending module is specifically configured to:

Optionally, the apparatus further comprises:

and the third sending module is used for modifying the identifier of the first VLAN in the first message into the identifier of the third VLAN if the identifier of the third VLAN corresponding to the destination MAC address is inquired, and sending the modified first message to the second network equipment corresponding to the destination MAC address through the interface corresponding to the destination MAC address and the identifier of the third VLAN.

Optionally, the first sending module is specifically configured to:

In a third aspect, there is provided a network device comprising a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor, the processor being caused by the machine-executable instructions to: the method steps of the first aspect are implemented.

In a fourth aspect, there is provided a machine-readable storage medium storing machine-executable instructions that, when invoked and executed by a processor, cause the processor to: the method steps of the first aspect are implemented.

In the data transmission method provided by the embodiment of the present application, when a first network device receives a first packet. Wherein, the first message carries destination MAC address and first VLAN identification. The first network device may query a VLAN list containing an identification of the first VLAN. Wherein the VLAN list comprises an identification of the first VLAN and an identification of the at least one second VLAN. If the VLAN list containing the identifier of the first VLAN is queried, the first network device may modify the identifier of the first VLAN in the first message into the identifier of the second VLAN, and send and process the modified first message according to the destination MAC address and the identifier of the second VLAN. Thus, communication can be realized between the user terminals in different VLANs.

Drawings

In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments of the present application, and for those skilled in the art, other drawings can be obtained according to the drawings without creative efforts.

Fig. 1a is a system framework diagram of a local area network according to an embodiment of the present application;

FIG. 1b is a schematic diagram of a device connection provided by an embodiment of the present application;

fig. 2 is a system framework diagram of another lan according to an embodiment of the present application;

fig. 3 is a flowchart of a method for data transmission according to an embodiment of the present application;

fig. 4 is a flowchart of an example of a method for data transmission according to an embodiment of the present application;

fig. 5 is a schematic structural diagram of a data transmission apparatus according to an embodiment of the present application;

fig. 6 is a schematic structural diagram of a data transmission apparatus according to an embodiment of the present application;

fig. 7 is a schematic structural diagram of a data transmission apparatus according to an embodiment of the present application;

fig. 8 is a schematic structural diagram of a network device according to an embodiment of the present application.

Detailed Description

The technical solutions in the embodiments of the present application will be clearly and completely described below with reference to the drawings in the embodiments of the present application, and it is obvious that the described embodiments are only a part of the embodiments of the present application, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present application.

The embodiment of the application provides a data transmission method which can be applied to network equipment in a local area network. Fig. 1a is a system architecture diagram of a local area network according to an embodiment of the present application. As shown in fig. 1a, the local area network may include a first network device, a second network device, a first user terminal, a second user terminal, and a third user terminal. In an actual network, the user terminal may be directly connected to the first network device, or may be connected to the first network device through the second network device. The first network device may be a firewall, and the second network device may be a switch or a router. In this embodiment, a user terminal is connected to a first network device through a second network device as an example.

FIG. 1b is a schematic diagram of device connection provided in the present embodiment, as shown in FIG. 1b, a first user terminal is connected to a GE1/0/1 interface of a second network device; the second user terminal is connected with the GE1/0/2 interface of the second network equipment; the XE1/0/1 interface of the second network device is connected with the XE2/0/1 interface of the first network device; the GE1/0/1 interface belongs to VLAN100, the GE1/0/2 interface belongs to VLAN200, and the XE1/0/1 interface and the XE2/0/1 interface belong to VLAN100 and VLAN 200; the MAC address of the first user terminal is 0000-; the first network device is provided with a Bridge module, the Bridge module can be pre-configured with a Bridge1 forwarding instance, and the VLAN list of the Bridge1 forwarding instance can contain VLAN100 and VLAN200 capable of communicating with each other. That is, the embodiment of the present application provides a Bridge forwarding method in a cross-VLAN mode, so as to achieve a technical effect of forwarding a packet across VLANs.

It should be noted that fig. 2 is a system framework diagram of another lan provided in the embodiment of the present application, and as shown in fig. 2, the second network device may further be connected to the XE2/0/2 interface of the first network device through an XE1/0/2 interface. Accordingly, the XE1/0/1 interface and the XE2/0/1 interface may belong to VLAN100, and the XE1/0/2 interface and the XE2/0/2 interface may belong to VLAN 200. The XE1/0/1 interface and the XE2/0/1 interface can also belong to VLAN200, and the XE1/0/2 interface and the XE2/0/2 interface can belong to VLAN 100. The embodiments of the present application are not limited. In the embodiment of the present application, it is described that the XE1/0/1 interface and the XE2/0/1 interface belong to VLAN100 and VLAN200, and the other cases are similar to them.

The data transmission method provided by the embodiment of the application can be applied to the first network equipment. The following describes a method for data transmission provided in the embodiments of the present application in detail with reference to specific embodiments, as shown in fig. 3, the specific steps are as follows.

Step 301, receiving a first message.

Wherein, the first message carries destination MAC address and first VLAN identification.

In implementation, when the first user terminal needs to communicate with the second user terminal, the first user terminal may send the first packet to the second network device. And the source MAC address in the first message is the MAC address of the first user terminal, and the destination MAC address is the MAC address of the second user terminal.

After receiving the first packet through the first interface, the second network device may add an identifier of a VLAN to which the first interface belongs (i.e., the first VLAN) to the first packet. Then, the second network device may add a corresponding relationship between the source MAC address, the identifier of the first VLAN, and the first interface in a pre-generated second MAC forwarding table. Similarly, the second network device receives, through the third interface, a response packet (hereinafter referred to as a second packet) sent by the second user terminal for the first packet. The second message carries an active MAC address and an identifier of a third VLAN, and the source MAC address of the second message is a destination MAC address of the first message. Then, the second network device may add a corresponding relationship between the source MAC address, the identifier of the third VLAN, and the third interface in a second MAC forwarding table generated in advance.

Then, the second network device may send the first packet according to the second MAC forwarding table, the destination MAC address, and the identifier of the first VLAN, that is, the second network device sends the first packet to the first network device through another interface (hereinafter, referred to as a second interface) of the interfaces divided into the first VLAN, except the first interface. The second network device will explain the specific processing procedure of sending the first message in detail in the following according to the second MAC forwarding table, the destination MAC address and the identifier of the VLAN.

After receiving the first packet through the third interface, the first network device may parse the first packet to obtain the destination MAC address and the identifier of the first VLAN, which are carried in the first packet.

For example, referring to fig. 1a, when a first user terminal needs to communicate with a second user terminal, the first user terminal may send a first packet to a second network device. Wherein, the source MAC address in the first message is 0000-. After the second network device receives the first packet through the first interface, i.e., the GE1/0/1 interface, first, the second network device may add an identifier of a first VLAN, i.e., VLAN100, to which the GE1/0/1 interface belongs, to the first packet. Then, the second network device may add the correspondence of the interfaces 0000-. Afterwards, the second network device may query the interfaces corresponding to 0000-. Since the second MAC forwarding table does not have interfaces corresponding to 0000-. The second network device sends the first message through the XE1/0/1 interface. After receiving the first packet through the XE2/0/1 interface, the first network device may parse the first packet to obtain the destination MAC address and the identifier of the first VLAN carried in the first packet.

Step 302, query a VLAN list containing an identification of the first VLAN.

Wherein the VLAN list comprises an identification of the first VLAN and an identification of the at least one second VLAN.

In implementation, a Bridge module may be preset in the first network device, and a plurality of Bridge forwarding instances may be set in the Bridge module, where each Bridge forwarding instance may be configured with a VLAN list, and the VLAN list may include identifiers of a plurality of VLANs that can communicate with each other. For example, the VLAN list for each Bridge forwarding instance may contain an identification of 2 VLANs that can communicate with each other.

After receiving the first packet through the third interface, that is, the XE2/0/1 interface, the first network device may add a correspondence between the source MAC address, the identifier of the first VLAN, and the third interface in a pre-generated first MAC forwarding table. The first network device may then query the VLAN list containing the identification of the first VLAN in the VLAN lists of each Bridge forwarding instance. In this way, one or more VLAN lists containing the identity of the first VLAN, i.e., one or more Bridge forwarding instances, can be determined.

For example, after the first network device receives the first packet through the XE2/0/1 interface, first, the first network device may add the correspondence between the interfaces 0000 + 0001, VLAN100, and XE2/0/1 in the pre-generated first MAC forwarding table. The first network device may then query the VLAN list containing the identification of VLAN100 in the VLAN list of each Bridge forwarding instance. VLAN100 is included in the VLAN list for the Bridge1 forwarding instance. Thus, the first network device can determine that the Bridge forwarding instance corresponding to VLAN100 is a Bridge1 forwarding instance.

Step 303, if a VLAN list including the identifier of the first VLAN is found, modifying the identifier of the first VLAN in the first message to the identifier of the second VLAN, and sending the modified first message according to the destination MAC address and the identifier of the second VLAN.

In an implementation, if the first network device queries a VLAN list including an identifier of the first VLAN, the first network device may modify the identifier of the first VLAN in the first message to an identifier of another VLAN (i.e., a second VLAN) in the determined VLAN list of the Bridge forwarding instance except the first VLAN, respectively. Then, the first network device may send the modified first packet according to the pre-generated first MAC forwarding table, the destination MAC address, and the identifier of the second VLAN, that is, the first network device sends the first packet to the second network device through an interface (i.e., a third interface) corresponding to the second VLAN.

After receiving the first message, the second network device may send the first message according to a pre-generated second MAC forwarding table, a destination MAC address, and an identifier of the second VLAN. In one example, the second network device may query, in the second MAC forwarding table, an interface corresponding to the destination MAC address and the identifier of the second VLAN, and if the interface corresponding to the destination MAC address and the identifier of the second VLAN is queried, send the first packet to the user terminal corresponding to the destination MAC address through the interface. If the interface corresponding to the destination MAC address and the identifier of the second VLAN is not inquired, the first message can be broadcasted to each interface (except the interface connected with the first network equipment) divided into the second VLAN.

For example, the first network device may modify VLAN100 in the first message to be an identification of a VLAN other than VLAN100 (i.e., VLAN 200) in the VLAN list of the Bridge1 forwarding instance. Then, the first network device may query the interfaces corresponding to 0000-. Since the first MAC forwarding table does not have an interface corresponding to 0000-.

It should be noted that, in the case that the VLAN list includes a plurality of identifiers of second VLANs capable of communicating with the first VLAN, the first network device may modify the identifier of the first VLAN in the first message to the identifier of each second VLAN. Then, the first network device may send and process the modified first packet according to the pre-generated first MAC forwarding table, the destination MAC address, and the identifier of each second VLAN.

For example, the VLAN list of the Bridge1 forwarding instance includes VLAN100, VLAN200, and VLAN300, and the XE1/0/1 interface and XE2/0/1 interface may also belong to VLAN 300. The first network device modifies VLAN100 in the first message to the identity of the other VLANs (i.e., VLAN200 and VLAN300) in the VLAN list of the Bridge1 forwarding instance, except VLAN 100. Then, the first network device may query the interfaces corresponding to 0000-. If the interfaces corresponding to 0000-. Similarly, the first network device may query the interfaces corresponding to 0000-. If the interfaces corresponding to 0000-.

Optionally, the step of sending, by the first network device, the modified first packet according to the destination MAC address and the identifier of the second VLAN is as follows.

Step one, in a pre-generated MAC forwarding table, an interface corresponding to a destination MAC address and an identifier of a second VLAN is inquired.

The MAC forwarding table comprises the corresponding relation of the MAC address, the VLAN identification and the interface.

In implementation, the first network device may generate a first MAC forwarding table in advance. After receiving a first packet through an interface, a first network device may add a corresponding relationship between a source MAC address of the first packet, an identifier of a VLAN, and the interface to a first MAC forwarding table to establish the first MAC forwarding table.

After the first network device modifies the identifier of the first VLAN in the first message into the identifier of the second VLAN, an interface corresponding to the destination MAC address and the identifier of the second VLAN carried in the first message may be queried in the first MAC forwarding table. If the first MAC forwarding table has an interface corresponding to the destination MAC address and the identifier of the second VLAN, the first network equipment executes the step two; and if the first MAC forwarding table does not have an interface corresponding to the destination MAC address and the identifier of the second VLAN, the first network equipment executes the third step.

And step two, the first message is sent to the network equipment corresponding to the destination MAC address through the interface corresponding to the destination MAC address and the identifier of the second VLAN.

In implementation, if an interface corresponding to the destination MAC address and the identifier of the second VLAN exists in the first MAC forwarding table, the first network device may send the first packet to the second network device corresponding to the destination MAC address through the interface.

And step three, broadcasting the first message to the interfaces divided into the second VLAN.

In an implementation, if there is no interface corresponding to the destination MAC address and the identifier of the second VLAN in the first MAC forwarding table, the first network device may broadcast the first packet to each interface (i.e., the fourth interface) divided into the second VLAN.

Optionally, if the VLAN list including the identifier of the first VLAN is not queried, the first network device may query, in a first MAC forwarding table generated in advance, an interface corresponding to the destination MAC address and the identifier of the first VLAN. And if the interface corresponding to the destination MAC address and the identifier of the first VLAN is inquired, the first message is sent to the network equipment corresponding to the destination MAC address, namely the second network equipment, through the interface corresponding to the destination MAC address and the identifier of the first VLAN. And if the interface corresponding to the destination MAC address and the identifier of the first VLAN is not inquired, broadcasting a first message to the interface divided into the first VLAN. The specific processing procedure is similar to step 303, and is not described in detail in this embodiment of the present application.

Optionally, for a case that the VLAN list includes a plurality of identifiers of the second VLANs, the first network device may further determine an identifier of a third VLAN to which the destination MAC address belongs before modifying the identifier of the first VLAN in the first message to the identifier of the second VLAN, and then modify the identifier of the first VLAN in the first message to the identifier of the third VLAN. The specific treatment process is as follows: and inquiring the identifier of the third VLAN corresponding to the destination MAC address in a pre-generated MAC forwarding table. The MAC forwarding table comprises a corresponding relation between the MAC address and the identifier of the VLAN, and the third VLAN is one of the second VLANs.

And if the identifier of the third VLAN corresponding to the destination MAC address is inquired, modifying the identifier of the first VLAN in the first message into the identifier of the third VLAN, and sending the modified first message to the second network equipment corresponding to the destination MAC address through the interface corresponding to the destination MAC address and the identifier of the third VLAN.

In implementation, the first network device may generate the first MAC forwarding table in advance. After receiving a first packet through an interface, a first network device may add a corresponding relationship between a source MAC address of the first packet, an identifier of a VLAN, and the interface to a first MAC forwarding table to establish the first MAC forwarding table.

After the first network device queries the VLAN list including the identifier of the first VLAN, the first network device may further query a third VLAN corresponding to the destination MAC address in a pre-generated first MAC forwarding table. And the third VLAN is one of the second VLANs.

If the first network device queries a third VLAN corresponding to the destination MAC address, the first network device may modify the identifier of the first VLAN in the first message to the identifier of the third VLAN in the VLAN list of the determined Bridge forwarding instance, and send the modified first message according to the destination MAC address and the identifier of the third VLAN. The specific steps of the first network device sending the modified first message according to the destination MAC address and the identifier of the third VLAN in step 303 are similar to those of the first network device sending the modified first message according to the destination MAC address and the identifier of the second VLAN. The embodiment of the present application is not described in detail. Therefore, the third VLAN corresponding to the destination MAC address can be determined, and then the first message can be sent in the third VLAN without sending the first message in all the VLANs contained in the VLAN list, so that the sending number of the messages is effectively reduced, and the forwarding efficiency is improved.

FIG. 4 is an example of a data transmission method according to an embodiment of the present application, referring to the device connection diagram shown in FIG. 1b, where a first user terminal is connected to a GE1/0/1 interface of a second network device; the second user terminal is connected with the GE1/0/2 interface of the second network equipment; the XE1/0/1 interface of the second network device is connected with the XE2/0/1 interface of the first network device; the GE1/0/1 interface belongs to VLAN100, the GE1/0/2 interface belongs to VLAN200, and the XE1/0/1 interface and the XE2/0/1 interface belong to VLAN100 and VLAN 200; the MAC address of the first user terminal is 0000-; the first network device is provided with a Bridge module, the Bridge module can be pre-configured with a Bridge1 forwarding instance, and the VLAN list of the Bridge1 forwarding instance comprises VLAN100 and VLAN200 which can communicate with each other. Fig. 4 shows specific steps of an example of a data transmission method as follows.

Step 401, the first user terminal sends a first message to the second network device.

The first message carries an active MAC address and a destination MAC address.

In implementation, when the first user terminal needs to communicate with the second user terminal, the first user terminal may send the first packet to the second network device. Wherein, the source MAC address in the first message is 0000-.

Step 402, the second network device broadcasts a first message under the first VLAN.

The first message carries an active MAC address, a destination MAC address and an identifier of a first VLAN.

In implementation, after the second network device receives the first packet through the GE1/0/1 interface, first, the second network device may add the identifier of the VLAN100 to which the GE1/0/1 interface belongs to the first packet. Then, the second network device may add the correspondence relationship of the interfaces 0000-. At this time, the second MAC forwarding table in the second network device is as shown in table one.

Watch 1

Serial number	MAC address	VLAN	Interface
					1	0000-0000-0000-0001	VLAN 100	GE1/0/1

Afterwards, the second network device may query the interfaces corresponding to 0000-. Since the second MAC forwarding table does not have interfaces corresponding to 0000-.

Step 403, the first network device broadcasts the modified first packet under the second VLAN.

The first message carries an active MAC address, a destination MAC address and an identifier of the second VLAN.

In implementation, after the first network device receives the first packet through the XE2/0/1 interface that is also located in the VLAN100, first, the first network device may add the correspondence between the interfaces 0000 + 0001, VLAN100, and XE2/0/1 in the first MAC forwarding table. At this time, the first MAC forwarding table in the first network device is as shown in table two.

Watch two

Serial number	MAC address	VLAN	Interface
					1	0000-0000-0000-0001	VLAN 100	XE2/0/1

The first network device may then query the VLAN list containing the identification of VLAN100 in the VLAN list of each Bridge forwarding instance. Since the VLAN list of the Bridge1 forwarding instance contains VLAN100, the Bridge forwarding instance for which the first network device can process the first packet is the Bridge1 forwarding instance. Thereafter, the first network device may modify VLAN100 in the first message to be an identification of a VLAN other than VLAN100 (i.e., VLAN 200) in the VLAN list of the Bridge1 forwarding instance. Finally, the first network device may query the interfaces corresponding to 0000-. Since the first MAC forwarding table does not have an interface corresponding to 0000-.

Step 404, the second network device sends the first message to the second user terminal.

The first message carries an active MAC address and a destination MAC address.

In implementation, the second network device receives the first message through the XE1/0/1 interface. First, the second network device may add the correspondence relationship between the interfaces 0000-. At this time, the second MAC forwarding table in the second network device is as shown in table three.

Watch III

Serial number	MAC address	VLAN	Interface
				1	0000-0000-0000-0001	VLAN 100	GE1/0/1
2	0000-0000-0000-0001	VLAN 200	XE1/0/1

Then, the second network device may query the interfaces corresponding to 0000-. Since the second MAC forwarding table does not have interfaces corresponding to 0000-. In addition, when the second network device sends the first message to the second user terminal through the GE1/0/2 interface, the second network device may also delete the identifier of the second VLAN carried in the first message.

Step 405, the second user terminal receives the first message.

The first message carries an active MAC address and a destination MAC address.

In implementation, after the second user terminal receives the first message, the second user terminal processes the first message if the destination MAC address of the first message is determined to be the same as the MAC address of the second user terminal.

Step 406, the second user terminal sends a second message to the second network device.

And the second message carries an active MAC address and a destination MAC address.

In implementation, when the second user terminal needs to communicate with the first user terminal, the second user terminal may send the second packet to the second network device. Wherein, the source MAC address in the second message is 0000-.

Step 407, the second network device sends the second packet to the first network device.

And the second message carries the active MAC address, the destination MAC address and the identifier of the second VLAN.

In implementation, after the second network device receives the second packet through the GE1/0/2 interface, first, the second network device may add the identifier of the VLAN200 to which the GE1/0/2 interface belongs to the second packet. Then, the second network device may add the correspondence relationship of the interfaces 0000-. At this time, the second MAC forwarding table in the second network device is as shown in table four.

Watch four

Serial number	MAC address	VLAN	Interface
					1	0000-0000-0000-0001	VLAN 100	GE1/0/1
2	0000-0000-0000-0001	VLAN 200	XE1/0/1
				3	0000-0000-0000-0002	VLAN 200	GE1/0/2

Afterwards, the second network device may query the interfaces corresponding to 0000-. Since the second MAC forwarding table has interfaces (i.e., XE1/0/1 interfaces) corresponding to 0000-.

Step 408, the first network device sends the modified second packet to the second network device.

And the second message carries the active MAC address, the destination MAC address and the identifier of the first VLAN.

In implementation, after the first network device receives the second packet through the XE2/0/1 interface, first, the first network device may add the corresponding relationship between the interfaces 0000 + 0002, VLAN200, and XE2/0/1 in the first MAC forwarding table. At this time, the first MAC forwarding table in the first network device is as shown in table five.

Watch five

Serial number	MAC address	VLAN	Interface
				1	0000-0000-0000-0001	VLAN 100	XE2/0/1
2	0000-0000-0000-0002	VLAN 200	XE2/0/1

The first network device may then query the VLAN list containing the identification of VLAN200 in the VLAN list of each Bridge forwarding instance. Since the VLAN list of the Bridge1 forwarding instance includes VLAN200, the first network device may determine that the Bridge forwarding instance corresponding to VLAN200 is the Bridge1 forwarding instance.

The first network device may then modify VLAN200 in the second message to be an identification of a VLAN other than VLAN200 (i.e., VLAN 100) in the VLAN list of the Bridge1 forwarding instance. Finally, the first network device may query the interfaces corresponding to 0000-. Since the first MAC forwarding table has interfaces (i.e., XE2/0/1 interfaces) corresponding to 0000-.

Step 409, the second network device sends the second message to the first user terminal.

In implementation, the second network device receives the second message through the XE1/0/1 interface. First, the second network device may add the correspondence relationship between the interfaces 0000-. At this point, the second MAC forwarding table in the second network device is as shown in table six.

Watch six

Then, the second network device may query the interfaces corresponding to 0000-. Since the second MAC forwarding table has interfaces (i.e., GE1/0/1 interfaces) corresponding to 0000-. In addition, when the second network device sends the second message to the first user terminal through the GE1/0/1 interface, the second network device may also delete the identifier of the first VLAN carried in the second message.

In step 410, the first user terminal receives the second message.

In implementation, after the first user terminal receives the second message, the first user terminal processes the second message if the destination MAC address of the second message is determined to be the same as the MAC address of the first user terminal.

In the data transmission method provided by the embodiment of the present application, when a first network device receives a first packet. Wherein, the first message carries destination MAC address and first VLAN identification. The first network device may query a VLAN list containing an identification of the first VLAN. Wherein the VLAN list comprises an identification of the first VLAN and an identification of the at least one second VLAN. If the VLAN list containing the identifier of the first VLAN is queried, the first network device may modify the identifier of the first VLAN in the first message into the identifier of the second VLAN, and send and process the modified first message according to the destination MAC address and the identifier of the second VLAN. Therefore, the communication between the user terminals in different VLANs can be realized, and the problem that hosts can not communicate with each other under different VLANs can be effectively solved. In addition, the data transmission method provided by the embodiment of the application provides an efficient and convenient method for the reconstruction and maintenance of the network, saves the cost and simplifies the maintenance workload.

Based on the same technical concept, as shown in fig. 5, an embodiment of the present application further provides an apparatus for data transmission, where the apparatus is applied to a first network device, and the apparatus includes:

a receiving module 510, configured to receive a first message, where the first message carries a destination MAC address and an identifier of a first VLAN;

a first query module 520, configured to query a VLAN list including an identifier of a first VLAN, where the VLAN list includes the identifier of the first VLAN and an identifier of at least one second VLAN;

the first sending module 530 is configured to modify the identifier of the first VLAN in the first message into the identifier of the second VLAN if the VLAN list including the identifier of the first VLAN is queried, and send the modified first message according to the destination MAC address and the identifier of the second VLAN.

Optionally, as shown in fig. 6, the apparatus further includes:

a second query module 540, configured to query, if a VLAN list including an identifier of the first VLAN is not queried, an interface corresponding to the destination MAC address and the identifier of the first VLAN in a MAC forwarding table generated in advance;

a second sending module 550, configured to send the first packet to a second network device corresponding to the destination MAC address through an interface corresponding to the destination MAC address and the identifier of the first VLAN if an interface corresponding to the destination MAC address and the identifier of the first VLAN is found;

the broadcasting module 560 is configured to broadcast the first packet to the interfaces divided into the first VLAN if the interface corresponding to the destination MAC address and the identifier of the first VLAN is not queried.

Optionally, the first sending module 530 is specifically configured to:

inquiring the identifier of a third VLAN corresponding to the destination MAC address in a pre-generated MAC forwarding table, wherein the third VLAN is one of the second VLANs;

Optionally, as shown in fig. 7, the apparatus further includes:

the third sending module 570 is configured to modify the identifier of the first VLAN in the first message into an identifier of a third VLAN if the identifier of the third VLAN corresponding to the destination MAC address is found, and send the modified first message to the second network device corresponding to the destination MAC address through an interface corresponding to the destination MAC address and the identifier of the third VLAN.

Optionally, the first sending module 530 is specifically configured to:

inquiring an interface corresponding to a destination MAC address and the identifier of the second VLAN in a pre-generated MAC forwarding table;

According to the data transmission device provided by the embodiment of the application, when the first network equipment receives the first message. Wherein, the first message carries destination MAC address and first VLAN identification. The first network device may query a VLAN list containing an identification of the first VLAN. Wherein the VLAN list comprises an identification of the first VLAN and an identification of the at least one second VLAN. If the VLAN list containing the identifier of the first VLAN is queried, the first network device may modify the identifier of the first VLAN in the first message into the identifier of the second VLAN, and forward the modified first message according to the destination MAC address and the identifier of the second VLAN. Thus, communication can be realized between the user terminals in different VLANs.

The embodiment of the present application further provides a network device, as shown in fig. 8, which includes a processor 801, a communication interface 802, a memory 803, and a communication bus 804, where the processor 801, the communication interface 802, and the memory 803 complete mutual communication through the communication bus 804,

a memory 803 for storing a computer program;

the processor 801 is configured to, when executing the program stored in the memory 803, cause the network device to perform the following steps, including:

Optionally, the method further includes:

The machine-readable storage medium may include a Random Access Memory (RAM) or a Non-Volatile Memory (NVM), such as at least one disk Memory. Additionally, the machine-readable storage medium may be at least one memory device located remotely from the aforementioned processor.

The Processor may be a general-purpose Processor, including a Central Processing Unit (CPU), a Network Processor (NP), etc.; the Integrated Circuit may also be a Digital Signal Processor (DSP), an Application Specific Integrated Circuit (ASIC), a Field Programmable Gate Array (FPGA), or other Programmable logic devices, discrete Gate or transistor logic devices, or discrete hardware components.

According to the network device provided by the embodiment of the application, when the first network device receives the first message, the first message is sent to the second network device. Wherein, the first message carries destination MAC address and first VLAN identification. The first network device may query a VLAN list containing an identification of the first VLAN. Wherein the VLAN list comprises an identification of the first VLAN and an identification of the at least one second VLAN. If the VLAN list containing the identifier of the first VLAN is queried, the first network device may modify the identifier of the first VLAN in the first message into the identifier of the second VLAN, and forward the modified first message according to the destination MAC address and the identifier of the second VLAN. Thus, communication can be realized between the user terminals in different VLANs.

It is noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrase "comprising an … …" does not exclude the presence of other identical elements in a process, method, article, or apparatus that comprises the element.

All the embodiments in the present specification are described in a related manner, and the same and similar parts among the embodiments may be referred to each other, and each embodiment focuses on the differences from the other embodiments. In particular, as for the apparatus embodiment, since it is substantially similar to the method embodiment, the description is relatively simple, and for the relevant points, reference may be made to the partial description of the method embodiment.

The above description is only for the preferred embodiment of the present application, and is not intended to limit the scope of the present application. Any modification, equivalent replacement, improvement and the like made within the spirit and principle of the present application are included in the protection scope of the present application.

Claims

1. A method for data transmission, the method being applied to a first network device, the method comprising:

if a VLAN list containing the identification of the first VLAN is inquired, the identification of the first VLAN in the first message is modified into the identification of the second VLAN, and the modified first message is sent and processed according to the destination MAC address and the identification of the second VLAN, wherein the identification of the first VLAN in the first message is modified into the identification of the second VLAN, the modified first message is sent and processed according to the destination MAC address and the identification of the second VLAN, the modified first message is inquired and processed in a pre-generated MAC forwarding table, and the identification of a third VLAN corresponding to the destination MAC address is inquired, and the third VLAN is one VLAN in the second VLAN; and if the identifier of a third VLAN corresponding to the destination MAC address is inquired, modifying the identifier of the first VLAN in the first message into the identifier of the third VLAN, and sending the modified first message to second network equipment corresponding to the destination MAC address through an interface corresponding to the destination MAC address and the identifier of the third VLAN.

2. The method of claim 1, further comprising:

3. The method of claim 1, further comprising:

4. The method according to claim 1, wherein the sending the modified first packet according to the destination MAC address and the identifier of the second VLAN comprises:

5. An apparatus for data transmission, the apparatus being applied to a first network device, the apparatus comprising:

a first sending module, configured to modify an identifier of the first VLAN in the first message into an identifier of the second VLAN if a VLAN list including the identifier of the first VLAN is queried, and send the modified first message according to the destination MAC address and the identifier of the second VLAN, where the first sending module is specifically configured to query, in a pre-generated MAC forwarding table, an identifier of a third VLAN corresponding to the destination MAC address, where the third VLAN is one of the second VLANs; the device further comprises a third sending module, configured to modify the identifier of the first VLAN in the first message into an identifier of a third VLAN if an identifier of the third VLAN corresponding to the destination MAC address is queried, and send the modified first message to a second network device corresponding to the destination MAC address through an interface corresponding to the destination MAC address and the identifier of the third VLAN.

6. The apparatus of claim 5, further comprising:

7. The apparatus of claim 5, wherein the first sending module is further configured to:

8. The apparatus of claim 5, wherein the first sending module is specifically configured to:

9. A network device comprising a processor and a machine-readable storage medium storing machine-executable instructions executable by the processor, the processor being caused by the machine-executable instructions to: carrying out the method steps of any one of claims 1 to 4.

10. A machine-readable storage medium having stored thereon machine-executable instructions that, when invoked and executed by a processor, cause the processor to: carrying out the method steps of any one of claims 1 to 4.