CN1103523C

CN1103523C - Integrated access, service and route device

Info

Publication number: CN1103523C
Application number: CN 00132494
Authority: CN
Inventors: 毛晓磊
Original assignee: Huawei Technologies Co Ltd
Current assignee: Huawei Technologies Co Ltd
Priority date: 2000-11-22
Filing date: 2000-11-22
Publication date: 2003-03-19
Anticipated expiration: 2020-11-22
Also published as: CN1354576A

Abstract

The present invention relates to an integral accessing, servicing and routing device which is formed by the integration of an exchange of large capacity, a plurality of access managing units (AMU), a plurality of WWW service providing units (WSU), a routing managing unit (RMU) and an Ethernet exchange, wherein the AMUs are used for managing a plurality of access servers, and the WWW service providing units are used for providing WWW access processing; the RMU is used for routing formation and external connection, and centralized management is carried out on all the ports by the RMU; the Ethernet exchange supports a VLAN, and is used for the convergence of control flows. The exchange of large capacity serves as the common backplane of each of the AMUs, each of the service providing units and the RMU so as to form a gigabit switching unit. The device can realize broadband subscriber access of large capacity and broadband application service of large capacity.

Description

Incorporate access, business, route device

The present invention relates to a kind of new data communications equipment, exactly, relate to a kind of incorporate access, business, route device.This device is used for data communication core network (CORE NETWORK) or edge network (EDGE NETWORK).This device adopts switch (Ethernet or ATM switch) as the switching backplane of whole device, and making interface between each unit, clear and clear and definite (when the employing Ethernet switch, interface is all the GE or the 10GE of standard, Gigabit Ethernet; When adopting ATM switch, interface is the ATM cell interface of 155/622Mbps or 2.5/10Gbps); The hardware that access-in management, routing management and professional each unit veneer that provides are provided all is the same board types that adopt based on the high performance network processor, increases different upper layer software (applications)s more respectively and constitutes.This device can overcome insert, aspect three of professional, the routes, and the bottleneck that may occur on the interconnection approach between the three.This device can be realized simple and effectively local expansion and long-range expansion by pile up (STACK) of switch.

At present; in data communications equipment, insert, professional, three kinds of business of route realize respectively by distinct device, usually still by each different vendor's stand-alone development; so far still find no the device that it is integrated in one, and corresponding effective integration method.Along with the continuous increase of data communication network bandwidth, must on the interconnection approach among this three and between the three, produce speed bottle-neck; This bottleneck most cases is to produce owing to the Gbps of individual equipment is limited.

At present, aspect high-end router and three-layer switching equipment, generally adopt distributed treatment.Its backboard is normally realized in two ways: a kind of is the bus type backboard that adopts the STD bus technology, and as bussing techniques such as employing PCI, CPCI, cell BUS, but the shortcoming of its existence is a complex structure, realizes difficulty, and performance is not high.As when adopting PCI, CPCI, the exchange capacity that may reach is less than 64bit * 64MHz=4Gbps; And because the arbitration and the address date of bus are multiplexing, actual available bandwidth is much smaller than this; And the bus type backboard is made mistakes easily, also is difficult to monitoring after makeing mistakes.Another kind is the switch type backboard that adopts application-specific integrated circuit ASIC, though higher performance is arranged, the implementation method complexity.And simple in structure because of backbone network (Core Network) or edge net (Edge Network), several limited interfaces (as only having used interfaces such as several GE seldom, 2.5G POS) have only been used, and the switching performance of switching backplane is higher than this far away, will cause the waste of backboard switching performance.Moreover, use ASIC to realize the router of switch type backboard, need on backboard, carry out intensive wiring, because backboard will be handled the high-speed parallel signal, the number of plies, layout, wiring for printed circuit board (PCB) all can propose harsh requirement, cause making and complex manufacturing, the construction cycle of entire product to prolong, and be difficult to after going wrong measure and the location, even be hard to tell hardware problem or software issue.The switch type backboard is in the EMC radiation, and anti-interference aspect is the comparison fragility.In addition because the backboard hardware allowance deficiency that may exist, when causing producing and the user go wrong after using a period of time, greatly damage image product.In addition, when the user needs bigger capacity, adopt bus type or switch type backboard, can not realize simple extension by the method for piling up (STACK), expansion must take the port (perhaps realize expansion by the method for reserving Gbps and respective grooves position, but the expansion scale of device being restricted) of equipment.Can think like this: use the switch type backboard, be equivalent to realize the switch of a special purpose interface.But this switch need use special-purpose solution and special chip, though manufacturing cost was lower after exploitation was finished, and its cost of developing, and the risk that the user uses is all very high.

Usually, the interface that router provides is all more limited, and the price of each port is very high, directly inserts very uneconomical economically as the user.And limit by application, router does not also have to consider how to solve the problem that inserts a large amount of broadband users.Because router is not considered these problems, can not effectively manage access server, cause access server need take the more router port and the IP address subnet network segment, ISP (Internet Service Provider) may occur and locate every frame access server (AS:Access Server) and be about 40-60 user, just need take a port and subnet network segment of router.This number of users that will cause router to insert is very limited, makes ISP be difficult to scale; When inserting a large number of users, because the IP address is not enough, the agreement that perhaps can only adopt renewal is (as IPX, IPv6, or based on the special technique of ATM), owing to realize complicatedly,, the various problems that are difficult to expect can occur with the good compatibility of normally used IP agreement.Will increase user's access function though the router that has has been considered, its way is nothing but with a kind of special higher layer applications of access function as router, concentrates and handles; Like this can not guaranteed performance, increased the complexity that software is realized again greatly.

Because router can not be realized simple and effectively expansion, the point of whenever founding a capital need adopt a complete high-performance router, just needs disposable input substantial contribution to be used to buy router like this when establishing for the first time, and the user is difficult to accept; Perhaps only can set up less several points and can not large-scale application.Because router can not be realized simple and effectively expansion, cause increasing router to be connected to each other, make the routing table of the last core router of Internet increasing, though dynamic routing is " gradually leniently " to be added the Internet core router to and get on, too many route also might cause the collapse suddenly of Internet core router.

In addition, present server still is the structure identical with PC basically: adopt pci bus, insert Ethernet card on the bus, be connected to local subnet by Ethernet interface.This structure makes performance that server can provide below 400M.According to test, server will overload during 400M, occurs various unusual.So when a large number of users is visited same server simultaneously, will cause server overload (be the performance rapid drawdown, feeling of user is exactly that network speed is very slow), the end user can't be stood.Existing server also exists the relatively poor and problem such as cost an arm and a leg of fail safe.Especially aspect fail safe, can be described as very troubling.As for various reasons and purpose, the operating system of server generally all is provided with the back door, though can being set, fire compartment wall stops,, this method is not proved effective sometimes very much, and the personnel that grasp relative program still can walk around fire compartment wall.

The purpose of this invention is to provide a kind of new types of data communication network device-incorporate access, business, route device (Unified Data Communication Equipment) that can solve above-mentioned various technological deficiencies.Use this device to realize big capacity, high-performance with comparatively simple method, can eliminate at issuable bottleneck between each equipment on the network, and therefore can provide some novel applied business, realize local and remote expansion etc. as the video request program (VOD) of a large number of users, jumbo broadband access, router by the exchange piling mode.

The object of the present invention is achieved like this: it is by large capacity exchanger, be used for a plurality of access-in managements unit AMU (AMU:Access Management Unit) that some access servers are managed, be used to provide a plurality of WWW business of WWW access process that unit WSU is provided (WSU:WWW Service provide Unit), and be used for route formation and be connected outside, and the routing management unit R MU (RMU:Route Management Unit) that all of the port is managed concentratedly carried out integrated and constitute, wherein large capacity exchanger is as above-mentioned each access-in management unit, business provides the common backboard of unit and routing management unit and constitutes gigabit crosspoint (abbreviating GSU:Gigabit Switch Unit as).

Above-mentioned gigabit crosspoint is an Ethernet switch, or ATM switch.

The composition of gigabit crosspoint GSU comprises switching fabric Switch Fabric and exchange of management two parts.

Above-mentioned access-in management unit AMU, WWW business provide unit WSU and are used for that route forms and routing management unit R MU adds that by the network processing unit hardware single board of the processing logic that includes Ethernet interface or ATM cell interface corresponding software is formed.

The distribution router that above-mentioned routing management unit R MU is made up of a main control unit RSMU (Route Service provide and portManagement Unit) and a plurality of interface unit (Versatile Interface Unit VIU:Versatile Interface Unit).

Wherein the function of access-in management unit AMU realization includes: obtain kernel route table KRT (KernelRoute Table) from main control unit; The IP that forms corresponding to this unit according to kernel route table KRT transmits (FT:Forward Table); Transmitting FT according to formed IP transmits the IP message forward and goes up specific WWW business to this device unit WSU or interface unit VIU are provided; Each WWW business from this device provides unit WSU or interface unit VIU to receive the IP message, and whether the judgement corresponding contents exists mistake, whether should be this unit reception; If different, then need to report, and carry out respective handling by main control unit RSMU to main control unit RSMU with the specified standard implementation method; And carry out according to VLAN (Virtual Local AreaNetwork) information, to the transparent forwarding work (being DHCPrelay:Dynamic Host Configuration Protocol relay) of the dynamic IP addressing request message that produces by access server and the conversion (NAT:NetworkAddress Translate is converted to " implicit IP address " " the pairing Port IP of this AMU address+specific source TCP/UDP port numbers ") of the network address.

Wherein the WWW business provides the function of unit WSU realization to include: obtain kernel route table KRT from main control unit RSMU; The IP that forms corresponding to this unit according to kernel route table KRT transmits; Transmit forwarding IP message according to formed IP and go up specific access-in management unit AMU or interface unit VIU to this device; Access-in management unit AMU, interface unit VIU from this device receive the IP message, and whether the judgement corresponding contents exists mistake, whether should be this unit reception; If different, need report to main control unit RSMU, and carry out respective handling by main control unit RSMU with the specified standard implementation method; Be used to manage the file system of WWW service content on this unit; Be used to provide the upper layer application service (Web Cache) of the magnanimity WWW content of the hard disk tower on the content server being carried out buffer memory; Be used to provide the WWW upper layer application service of service.

Wherein the function of Versatile Interface Unit VIU realization includes: obtain kernel route table KRT from main control unit RSMU; The IP that forms corresponding to this unit according to kernel route table KRT transmits; Transmit forwarding IP message according to formed IP and provide unit WSU, access-in management unit AMU or interface unit VIU to the last specific WWW business of this device; WWW business from this device provides unit WSU, access-in management unit AMU, interface unit VIU to receive the IP message, and whether the judgement corresponding contents exists mistake, whether should be this unit reception; If different, need report to main control unit RSMU, and carry out respective handling by main control unit RSMU with the specified standard implementation method; Be connected to the physical layer of each outside interface, the management of link layer; Whether the IP message that judgement receives from the outside is the dynamic routing message, if, then the message transparent forwarding is arrived main control unit RSMU, unify to handle by it, to generate kernel route table KRT.

Main control unit wherein, promptly the function that realizes of main control unit RSMU includes: the user's configuration according to control desk (console) sets the IP address for interface unit VIU, business provide unit WSU, AMU port; According to the request of corresponding port, issue kernel route table KRT; Provide unit WSU port to carry out unified management to each interface unit VIU, access-in management unit AMU, business on the device, each port is all as its physical vlan port VP (Virtual Port); Monitoring and management to gigabit crosspoint GSU; Obtain the route message from interface unit VIU, and produce the dynamic routing list item according to these message informations, and cooperate the user from the control desk manual configuration static routing (Static Route), the direct route of obtaining from adjacent device (Direct Route) and the dynamic routing (Dynamic Route) that formed form the kernel route table KRT of renewal.

Wherein the realization function of gigabit crosspoint GSU includes: the two floor heights speed exchange between clear and definite Ethernet (or ATM) interface; Whether each interface has the monitoring of exception message, if different with the specified standard implementation method, need report to main control unit RSMU, and carry out respective handling by main control unit RSMU.

Wherein gigabit crosspoint GSU realizes local expansion and long-range expansion with the method for piling up (stack); Adopt inner PVC to carry out interconnection between the port when adopting atm interface, inner PVC uses specific VPI/VCI; When adopting Ethernet interface, should limit broadcast packet, and make port binding in particular mac address.

Wherein the Ethernet switch of supported vlans is to be that (VLAN trunk is a kind of special Ethernet interface to a GEVLAN trunk with compiling more than or equal to 10 10/100M Ethernet interfaces, the information of VLAN under comprising in the frame head of the ethernet frame that it transmitted, can differentiate according to vlan information and to belong to concrete which port), each 10/100 Ethernet interface is in different VLAN respectively, their are directly intercommunication each other, and can only with the intercommunication of GE VLAN trunk mouth; This Ethernet switch can be to be realized by an asic chip on the corresponding veneer.

This device provides with lower interface to the outside: the upstream Interface that is connected to outside same category of device or core router by transmission equipment SDH, DWDM; The downstream interface that connects present existing router, server, Ethernet switch kind equipment; The long-range expansion interface that piles up that comprises a control flows interface and a data stream interface; Expansion interface is piled up in this locality that comprises a control flows interface and a data stream interface; Business provides the interface that is used to connect content server on the unit WSU; The interface that is used to connect DHCP, aaa server on the access-in management unit AMU; Be used to be connected to the access interface by the Ethernet switch of supported vlans on the access-in management unit AMU, this interface is generally Gigabit Ethernet VLAN trunk, and the Ethernet switch of this supported vlans further connects a plurality of access server AS again; The console interface CONSOLE that main control unit RSMU provides;

The frequency range of the Ethernet interface in the descending local interface that above-mentioned interface unit VIU provides is 10/100M or 1G.The frequency range of the up external interface that interface unit VIU provides can be 155/622Mbps or 2.5/10Gbps.The local area network interface is as broad as long strictly speaking with the Wide Area Network interface that is connected to the outside.This locality piles up expansion interface and long-range to pile up expansion interface as broad as long strictly speaking.

Main control unit RSMU is used for each port to this device and carries out unified management, forms routing table and the veneer in each module issues; A plurality of interface unit VIU on this device, a plurality of business provide unit WSU, AMU unit, a plurality of access-in managements unit all to have complete routing table, can transmit the IP message to installing the IP address of going up belonging to respectively of other unit of the different IP subnet network segment according to routing table, make each module all have IP forwarding capability between complete subnet.

Structure of the present invention and its implementation are compared with present traditional implementation, have the following advantages: directly adopt common large capacity exchanger (Ethernet or ATM switch) as backboard, effective simplified structure reduces the complexity of equipment.Use the Ethernet interface (or ATM cell interface) of the opening that switch provided, can adopt many existing very ripe and continuous perfect technology.And because the opening of Ethernet interface (or atm interface), device of the present invention can effectively be realized local expansion and long-range expansion by pile up (STACK) of switch.The present invention utilizes some main features (comprising: thereby capacity is big, midrange speed interface that a lot of 10/100Mbps can be provided, can divide VLAN, can differentiate that distinct interface inserts a large number of users by VLAN at interface) of the Ethernet switch of supported vlans, with its intermediate approach as the access user, can solve the problem that router is difficult to insert a large number of users (this user can think that refer to is not the end user, but a plurality of access server) preferably.

The hardware classes of AMU among the present invention, WSU and RSMU, VIU seemingly, its difference is to handle different application.In general, interface unit need be handled the dynamic routing task, is about to relevant dynamic routing information and is delivered to main control unit RSMU; The WWW business provides module WSU to handle the application that has a large amount of WWW page access; And access-in management unit AMU mainly handles the application (DHCP relay) of network address translation NAT and dynamic IP addressing distribution.Business provides module WSU, access-in management unit AMU not to handle dynamic routing and uses, they directly obtain routing table from main control unit RSMU, only need to handle the work of forwarding forward of various objectives ground IP message, and from the reception work of the IP message of Switching Module unit GSU.

Business among the present invention provides module WSU that more protection approach can be provided the content of WEB system, such as in the veneer file system file being carried out write-protect, carried out fire compartment wall and similar functions.And, because server is to adopt network processing unit to realize, and is integrated in this device and forms integrated device, thus be expected to improve the access performance and the fail safe of server, and can reduce the cost of server.

Device of the present invention does not repel existing various device, comprises the router, server and the access server that have had, and existing these equipment in user there all can be connected to the descending access interface of specific VIU on this equipment.

Fig. 1 is that the structure of apparatus of the present invention is formed and internal data flow and control flows annexation schematic diagram.

Fig. 2 is the schematic diagram of each interface of externally providing of apparatus of the present invention.

Referring to Fig. 1, apparatus of the present invention 1 are by large capacity exchanger 10, be used for a plurality of access-in managements unit 20 (AMU:Access Management Unit) that some access servers are managed, be used to provide a plurality of WWW business of WWW access process that unit 30 (WSU:WWW Service provide Unit) is provided, and be used for route formation and be connected outside, and the routing management unit 40 (RMU:Route Management Unit) that all of the port is managed concentratedly, and the Ethernet switch 50 that is used to converge the supported vlans of control flows carries out integrated and constitutes, and wherein topmost characteristics are to adopt large capacity exchanger as above-mentioned each access-in management unit, business provides the common backboard of unit and routing management unit and constitutes gigabit crosspoint 10 (abbreviating GSU:Gigabit Switch Unit as).This large capacity exchanger 10 can be an Ethernet switch, also can be ATM switch, and its interface is exactly Ethernet interface or ATM cell interface.The composition of gigabit crosspoint 10 (GSU) comprises switching fabric 11 (Switch Fabric) and exchange of management 12 two parts.Gigabit crosspoint 10 can carry out the expansion of exchange capacity by piling up expansion interface 13.Wherein routing management unit 40 is by main control unit 42 (RSMU), formed with a plurality of interface units 41 (VIU), and be a distributed router.

Referring to Fig. 2, the interface that apparatus of the present invention 1 externally provide comprises that the common router interface 43 that is provided by interface unit VIU, the console interface 44, the business that are provided by main control unit RSMU provide the server interface 31 of the last external content server of unit WSU, server interface 21, the access-in management unit 20 that access-in management unit AMU goes up external DHCP and aaa server to be provided with the GE VLAN trunk interface 22 that is used to be connected access switch 60.This interface 22 connects a plurality of access servers 70 by the Ethernet switch 60 of supported vlans; Interconnection approach between access switch 60 and the access server 70 is a 10/100M Ethernet interface 61.Access server 70 directly provides subscribers feeder 71, connects the end user.

The present invention uses large capacity exchanger to make backboard, is equivalent to function of exchange " encapsulation " be made backboard function of exchange modularization, location and solution after helping going wrong.Particularly testing equipment and the method for testing at Ethernet is all very ripe, can effectively reduce development difficulty and cost.And the inner switching technology that adopts of switch is transparent to other module, and can think: this big capacity Ethernet switch inside is exactly a high-speed bus, and this bus bandwidth equals the exchange capacity of big capacity Ethernet switch.As the big capacity Ethernet switch that backboard is used, promptly big capacity crosspoint GSU needs to carry out particular arrangement, so that it is used as the standard switching network.When GSU adopted Ethernet switch, performed particular arrangement was listed as follows:

1, the mac address forwarding table of this Ethernet switch inside is fixing table, and the port that does not allow to occur any connection sends target MAC (Media Access Control) address and is not present in the ethernet frame that this is transmitted;

2, each port binding of this Ethernet switch is in specific MAC Address, and the ethernet frame that just only allows a particular source MAC Address port to send just can be received and handle by this large capacity exchanger;

3, do not allow any port broadcasting to occur.Because after broadcasting occurred, Ethernet switch must copy to it each port, cause great performance to reduce (if 100 ports are arranged, the broadcasting of every port one % will cause whole switch all to block paralysis);

4, with the ethernet port of the big direct-connected corresponding veneer of capacity Ethernet switch, there is not independent IP address (to have only specific MAC Address, be used for the exchange of GSU), can think: its IP address is to use the IP address that is connected to outside port on the veneer.

If one of four kinds of situations described above, then will be as producing alarm unusually, and need corresponding processing of execution (to produce the broadcast packet of some, non-sources of law target MAC (Media Access Control) address bag such as monitoring certain port, then provide alarm, and in time seal this port, the corresponding veneer of port is carried out reset or other processing), so that make the normal stable operation of system.

When gigabit crosspoint GSU adopted ATM switch, then VPI/VCI adopted value specific, that can not cause conflict and misunderstanding.And should guarantee the reasonable use of GSU exchange capacity, the most rational situation is that each port flow sum approaches GSU exchange capacity altogether.If exchange capacity is not enough, can expand the capacity of this switch by piling up interface again, to realize the expansion of whole device exchange capacity.In user's use, according to the statistics that the user flows to data, the number of reasonable disposition access, business, each veneer of routing unit, and the traffic carrying capacity of bearing.

Apparatus of the present invention regularly detect connective between each port of GSU and switching performance.Occur to lead to or switching performance does not reach desired flow if detect between any two ports of GSU, then need to carry out specific processing.Integrated apparatus of the present invention might occur certain port fully because a lot of other port is all visited it, and cause flow to cause the situation (this situation IP fortunately is connectionless, allows to occur packet loss) of obstruction too greatly when exchange capacity is big.This abnormal conditions also by oneself by GSU, and switch all has the safeguard measure of this respect.

Specification requirement of the present invention and characteristics further are described below: set up the WWW business unit WSU is provided, realize the WWW business service of high-performance and safety; And for other the business not high to performance requirement, as DNS server, AAA server, DHCP server, then can realize by the common server that descending access place connects; Business provides unit WSU and common server difference to be: have powerful IP transfer capability.This WSU veneer is provided with through core routing management unit R SMU and handles, and sends to the routing table of this port by control flows, and WSU carries out the transmission of IP message with reference to this routing table.The size requirements of routing table can reach＞100K bar route, is enough to realize the core routing function.

Above-mentioned each veneer large capacity exchanger GSU one side not configuration of IP address (when GSU adopted Ethernet switch, this Ethernet interface had only specific MAC Address, and this GSU finishes exchange by MAC Address; When GSU adopted ATM switch, corresponding atm interface had specific VPI/VCI, by the inside PVC realization exchange of ATM switch), and think that the IP address of this side is the same with the IP address of an outside side, this side has been an exchange interaction; This port is the same with the control flows port, is the connectivity port, inside of this device, be not RSMU directly management to external port.

That AMU outside in access-in management unit connects is IEEE 802.3q VLAN trunk, comprises a plurality of information that insert VLAN.During the customer requirements distributing IP address inserted, access server AS produces corresponding dhcp broadcast, after broadcasting enters AMU by this VLAN trunk, access-in management unit AMU transparent forwarding is to the Dynamic Host Configuration Protocol server that connects thereon, thereby is embodied as user's dynamic assignment IP address and relevant authentication, charging etc.; Each access-in management unit AMU can insert a lot of users by an IP address of this port, mostly is 255 * 255 * 253 most in theory.

The all of the port unification of present device is managed by main control unit RSMU, main control unit RSMU is responsible for handling the control flows of all veneers, all unit connect outside port all as the physical vlan interface of main control unit RSMU, and the physical connection that this main control unit inserts is the IEEE 802.3q VLAN trunk of higher bandwidth.The physical connection of each veneer control flows then adopts the 10/100M Ethernet, (this Ethernet switch has been the effect of converging control flows to the Ethernet switch that flows by transmitting control, do not need to realize the exchange between each port), be pooled to main control unit RSMU through IEEE 802.3q VLAN trunk.Because the control flows of all veneers except that main control unit RSMU all is to be pooled to RSMU through Ethernet switch, so preferably the VLAN id under each veneer is different; Like this, this Ethernet switch can guarantee that each port all is connected to main control unit RSMU, and can not interact between the port.

In addition, the routing table on the existing server generally is a very simply table (can check routing table with order Route print or netstart-r order), has only several routes, because generally can not realize very strong routing function on the server.Server only is connected to the local subnet network segment, so if for other network segment provides service, must transfer through router.The www server that the present invention will have the high amount of traffic amount to require is realized as network equipment WSU, to overcome the performance boundary of existing server.In order to improve performance, existing server may need the Ethernet interface processing logic is placed directly on the cpu bus.The present invention adopts inside to comprise the network processing unit of the processing logic of Ethernet interface or atm interface, makes the interface can be mutual with CPU core effectively, thereby guarantees to promote service performance.In this equipment, RSMU provides complete routing table for WSU, so any port (belonging to each different subnet network segment) that WSU can be on the equipment directly provides service, does not need to transfer through the same equipment of similar router again.

In this integration apparatus, WSU provides a high-speed data stream interface, a control flows interface, the interface as the connection content server.The high-speed data stream interface is directly connected to GSU, and needs to observe corresponding rule.The control flows interface mainly is to report single board state, and obtains KRT from RSMU.The content server interface is connected to the computer that is called content server, obtains the respective service content from this computer.

The content of server is by the file system unified management that realizes in the WSU internal memory of single board, and the internal memory that uses as file system separates with the internal memory of program running is strict, and takes the corresponding protection measure, guarantees the fail safe of server content.

Access-in management unit AMU uses VLAN and NAT technology, realizes that jumbo user inserts.AMU provides interface that a high-speed data stream interface (be connected to GSU do exchange with), a control flows interface (being connected to RSMU), one connect the IEEE 802.3q VLAN trunk that the access network based on ethernet switch comes, one to be connected to DHCP and AAA server as dynamic IP addressing is distributed and authentication and accounting is used interface.Connecting to the control flows of RSMU is in order to obtain KRT, is to distribute dynamic IP addressing and authentication and accounting for the user for access to the connection of DHCP server.The place that AMU is different with VIU is: do not handle application such as dynamic routing, only need to handle application such as NAT.

Present access server equipment often adopts the method for fixed allocation IP address to insert the user of high bandwidth, has IP address waste serious problems, and the IP address resource is about to exhausted.In this equipment, the mode that is adopted as access server dynamic assignment IP address addresses this is that.AMU will require the transparent connection Dynamic Host Configuration Protocol server (and other broadcasting is cut off) thereon that is sent to of the broadcast packet (dhcp broadcast) of distributing IP address.Dynamic Host Configuration Protocol server is determined corresponding IP subnet according to VLAN ID, and distributes corresponding IP address, can allow 1-500 user in the general IP subnet.Adopt NAT, all users that this Access Management is inserted use an IP address visit outside (NAT: network address translation also is called internal proxies).The dynamic IP addressing that NAT distributes is that Internet goes up the IP address that keeps, and is generally the 10.x.x.x address.

Existing access approach has 56K POTS, 128K ISDN BRI, 2M ISDN PRI, ADSL, HDSL, xDSL, Cable, HFC, Ethernet access etc.In this equipment, for realizing that big capacity designed scheme is: these access approach are by the unified Ethernet interface that is converted into of other access server AS, and entering into the particular vlan (switch is divided VLAN according to port) of access network based on ethernet switch, the access network based on ethernet switch is connected to access-in management unit AMU by 802.3q VLAN trunk again.Access server AS need be converted into dhcp broadcast request message on the Ethernet to the PPP message (or other type message) of IP Address requests with external user, and this message enters access-in management unit AMU by access switch.VLAN ID has 14, that is to say that an AMU can insert 4096 VLAN at most in theory simultaneously by VLAN trunk.N piece Access Management AMU can insert n*4096 VLAN in theory simultaneously.

An AMU can be with a DHCP server, that is to say that a plurality of AMU can be with a plurality of DHCP server, so can distribute the IP address of same 10.x.x.x for the user.Because under this sharp situation, the IP address of user's 10.x.x.x is identical, and it is identical to show that just they arrive outside access source port number, is different (because IP addresses of the different AMU port assignment different sub-network network segments) but be linked into external IP addresses.

This cut-in method is equivalent to expand the IP address with port numbers, so available limited IP address resource inserts a large number of users.Certainly the problem that produces like this is, does not have real IP address, directly intercommunication between the end user owing to insert the user.But this can provide by certain novel service is provided, here be not further analyzed (since because two users can send out E-mail mutually, adopt and the similar method of E-mail so, corresponding server is set, just can realize the intercommunication of others).

The present invention has used the network environment device of existing enterprise's net to build simulation, and is working properly, can realize purpose of the present invention.

Claims

1, a kind of incorporate access, business, route device, it is characterized in that: it is by large capacity exchanger, a plurality of access-in managements unit (AMU) of being used for some access servers are managed, is used to provide a plurality of WWW business of WWW access process that unit (WSU) is provided, and is used for route and forms with the Ethernet switch that is connected routing management unit (RMU) outside and that all of the port is managed concentratedly and is used to converge the supported vlans of control flows and carry out integrated and formation; Wherein large capacity exchanger provides the common backboard of unit and routing management unit and constitutes crosspoint as above-mentioned each access-in management unit, business.

2, incorporate access as claimed in claim 1, business, route device, it is characterized in that: above-mentioned large capacity exchanger is an Ethernet switch, or ATM switch.

3, incorporate access as claimed in claim 1 or 2, business, route device is characterized in that: the composition of crosspoint comprises switching fabric (Switch Fabric) and exchange of management two parts.

4, incorporate access as claimed in claim 1, business, route device is characterized in that: above-mentioned access-in management unit (AMU), WWW business provide unit (WSU) and are used for that route forms and routing management unit (RMU) all adds that by the network processing unit hardware single board of the processing logic that includes Ethernet and atm interface the software of correspondence is formed.

5, incorporate access as claimed in claim 1, business, route device is characterized in that: the distribution router that above-mentioned routing management unit (RMU) is made up of a main control unit (RSMU) and a plurality of interface unit (VIU).

6, incorporate access as claimed in claim 1, business, route device is characterized in that: wherein the function of access-in management unit (AMU) realization includes: obtain kernel route table (KRT) from main control unit; The IP that forms corresponding to this unit according to kernel route table (KRT) transmits (FT); Transmitting (FT) according to formed IP transmits the IP message forward and goes up specific WWW business to this device unit (WSU) or interface unit (VIU) are provided; Each WWW business from this device provides unit (WSU) or interface unit (VIU) to receive the IP message, and whether the judgement corresponding contents exists mistake, whether should be this unit reception; If different, then need to report, and carry out respective handling by main control unit (RSMU) to main control unit (RSMU) with the specified standard implementation method; And carry out according to vlan information, to the transparent forwarding work (DHCP relay) of the dynamic IP addressing request message that produces by access server with " implicit IP address " is converted to the conversion (Network Address Translate) of the network address of " this pairing Port IP address, access-in management unit (AMU)+specific source TCP/UDP port numbers ".

7, incorporate access as claimed in claim 1, business, route device is characterized in that: wherein the WWW business provides the function of unit (WSU) realization to include: obtain kernel route table (KRT) from main control unit (RSMU); The IP that forms corresponding to this unit according to kernel route table (KRT) transmits; Transmit forwarding IP message according to formed IP and go up specific access-in management unit (AMU) or interface unit (VIU) to this device; Access-in management unit (AMU), interface unit (VIU) from this device receive the IP message, and whether the judgement corresponding contents exists mistake, whether should be this unit reception; If different, need report to main control unit (RSMU), and carry out respective handling by main control unit (RSMU) with the specified standard implementation method; Be used to manage the file system of WWW service content on this unit; Be used to provide magnanimity WWW content to carry out the upper layer application service (Web Cache) of depositing of helping to the hard disk tower on the content server; Be used to provide the WWW upper layer application service of service.

8, incorporate access as claimed in claim 1, business, route device is characterized in that: wherein the function of Versatile Interface Unit (VIU) realization includes: obtain kernel route table (KRT) from main control unit (RSMU); The IP that forms corresponding to this unit according to kernel route table (KRT) transmits: transmit forwarding IP message according to formed IP and provide unit (WSU), access-in management unit (AMU) or interface unit (VIU) to the last specific WWW business of this device; WWW business from this device provides unit (WSU), access-in management unit (AMU), interface unit (VIU) to receive the IP message, and whether the judgement corresponding contents exists mistake, whether should be this unit reception; If different, need report to main control unit (RSMU), and carry out respective handling by main control unit (RSMU) with the specified standard implementation method; Be connected to the physical layer of each outside interface, the management of link layer; Whether the IP message that judgement receives from the outside is the dynamic routing message, if, then the message transparent forwarding is arrived main control unit (RSMU), unify to handle by it, to generate kernel route table (KRT).

9, incorporate access as claimed in claim 1, business, route device, it is characterized in that: wherein the function of main control unit (RSMU) realization includes: the user's configuration according to control desk sets the IP address for interface unit (VIU), business provide unit (WSU), access-in management unit (AMU) port; According to the request of corresponding port, issue kernel route table (KRT); Provide unit (WSU) port to carry out unified management to each interface unit (VIU), access-in management unit (AMU), business on the device, each port is all as its physical vlan port (Virtual Port); Monitoring and management to gigabit crosspoint (GSU); (VIU) obtains the route message from interface unit, and according to these message informations generation dynamic routing list items, and cooperate the user from the control desk manual configuration static routing (Static Route), the direct route of obtaining from adjacent device (Direct Route) and the dynamic routing (Dynamic Route) that has formed, to form the kernel route table (KRT) that upgrades.

10, incorporate access as claimed in claim 1, business, route device is characterized in that: wherein the function of crosspoint realization includes: the two floor heights speed exchange between clear and definite Ethernet or the atm interface; Whether each interface has the monitoring of exception message, if different with the specified standard implementation method, need report to main control unit (RSMU), and carry out respective handling by main control unit (RSMU).

11, incorporate access as claimed in claim 1, business, route device is characterized in that: wherein crosspoint can be realized local expansion and long-range expansion with the method for piling up (stack); Adopt inner permanent virtual to connect (PVC) when adopting atm interface and carry out interconnection between the port, inner permanent virtual connects (PVC) and uses specific virtual path identifiers/Virtual channe identifiers (VPI/VCI); When adopting Ethernet interface, should limit broadcast packet, and make port binding in particular mac address.

12, incorporate access as claimed in claim 1, business, route device, it is characterized in that: wherein the Ethernet switch of supported vlans is to be a gigabit ether VLAN aggregation (GE VLAN trunk) with compiling more than or equal to 10 10/100M Ethernet interfaces, each 10/100 Ethernet interface is in different VLAN respectively, their are directly intercommunication each other, and can only with gigabit ether VLAN aggregation (GE VLAN trunk) mouthful intercommunication; This Ethernet switch is to be realized by an asic chip on the corresponding veneer.

13, incorporate access as claimed in claim 1, business, route device is characterized in that: this device provides with lower interface to the outside: the upstream Interface that is connected to outside same category of device or core router by transmission equipment SDH, DWDM; The downstream interface that connects present existing router, server, Ethernet switch kind equipment; The long-range expansion interface that piles up that comprises a control flows interface and a data stream interface; Expansion interface is piled up in this locality that comprises a control flows interface and a data stream interface; Business provides the interface that is used to connect content server on the unit (WSU); The interface that is used to connect DHCP, aaa server on the access-in management unit (AMU); Be used to be connected to access interface on the access-in management unit (AMU) by the Ethernet switch of supported vlans, this interface is generally gigabit ether VLAN aggregation (Gigabit Ethernet VLANtrunk), and the Ethernet switch of this supported vlans further connects a plurality of access servers (AS) again: the console interface (CONSOLE) that main control unit (RSMU) provides.

14, incorporate access as claimed in claim 1, business, route device is characterized in that: the frequency range of the Ethernet interface in the descending local interface that above-mentioned interface unit (VIU) provides is 10/100M or 1G; The frequency range of the up external interface that interface unit (VIU) provides can be 155/622MbpS or 2.5/10GbPS.