JP6504803B2 - Station side communication apparatus, optical communication system, and reboot control method - Google Patents

Description

  The present invention relates to a station-side communication device that communicates with a terminal-side communication device through an optical transmission medium.

  Generally, in a PON (Passive Optical Network) system (including GE-PON (Gigabit Ethernet (registered trademark)-Passive Optical Network) system) which is one of optical communication systems, a center station is a station as a station-side communication device An optical line terminal (OLT: Optical Line Terminal) is arranged. In the OLT, a PON package is disposed as an interface unit for terminating an optical line on the station side, and the PON package includes a plurality of terminal side communication devices via a plurality of optical fibers as optical transmission media and optical couplers. It is connected to a subscriber side optical termination unit (ONU: Optical Network Unit). In the present specification, the term "package" refers to an electronic component in which elements necessary for performing a specific function are grouped or an apparatus in which such an electronic component is grouped.

  For example, in the PON system, data transmitted from a subscriber terminal connected under the ONU is transmitted to the PON package in the OLT, and is sent to the upper network via the L2 switch (layer 2 switch) package as a switch unit. Will be sent. The OLT in the PON system may be configured to include, for example, a monitoring package as a monitoring unit that monitors the status of the PON package and the L2 switch package. When the monitoring package detects an abnormality in the package that monitors the state, it determines that the package in which the abnormality is detected is a failure or a failure.

  If a failure or failure occurs in the monitoring package itself, the monitoring package can not notify the network maintenance person of the occurrence of the failure or failure. Therefore, when a failure or failure occurs in the monitoring package itself, there is a method of recovering from a temporary failure or failure of the monitoring package by executing reboot (restart) of the monitoring package in which the failure or failure has occurred. . For example, a method has been proposed in which the start record of the operation system is held in the monitoring package and it is determined whether to start in the normal mode or start in the maintenance mode based on the start record. When the number of activations of the operation system reaches a predetermined number, the firmware is transferred via a network such as Ethernet (registered trademark; hereinafter, the description is omitted) by switching to the maintenance mode and transferred. A method has been proposed in which firmware is written to a flash memory for recovery. (See, for example, Patent Document 1).

JP 2007-52520 A

  In the monitoring package in the PON system, the firmware (application program) is held in the storage area of the operation system and the storage area of the standby system (backup system) in the storage medium (for example, flash memory), and startup of the system fails a predetermined number of times In some cases, the firmware to be operated may be switched and activated. According to this mechanism, in order to count the number of activations of the operation system, volatile memory (for example, static random access memory (SRAM)) is mounted on the monitoring package, and a failure or failure occurs in the monitoring package. After counting up the number of activations of the operation system, reboot the monitoring package in which a failure or failure has occurred, and if the normal activation fails by a predetermined number of times, switch the operating firmware to activate the OLT or PON. The non-monitoring time in the system can be shortened.

  Here, in the configuration in which the SRAM is mounted in the monitoring package and the number of activations of the operation system is recorded, it is necessary to maintain the recorded number of activations even after the monitoring package is rebooted. There is a method to reboot the monitoring package (hereinafter referred to as "shallow reboot"). In the case of a shallow reboot, the information recorded in the SRAM is maintained, but a process (hereinafter referred to as “deep reboot”) may be executed to temporarily turn off the power of the monitoring package in which the failure or failure has occurred and reboot. Can not. Therefore, there is a problem that the time for which the OLT or PON system is not monitored continues for a long time because a failure that can be recovered by performing deep reboot can not be dealt with.

  Therefore, it is an object of the present invention to increase the efficiency of failure recovery and reduce the time of non-monitoring state by the station-side communication device by executing processing for temporarily powering down and rebooting the monitoring package in which the failure has occurred. It is to be.

A station-side communication apparatus according to the present invention is a station-side communication apparatus that communicates with a terminal-side communication apparatus through an optical transmission medium, comprising: a plurality of interface units connected to the optical transmission medium; the plurality of interface units; A switch unit relaying the plurality of interface units and the upper network, and a monitoring unit connected to the switch unit and monitoring states of the plurality of interface units and the switch unit. The monitoring unit includes a nonvolatile storage unit for storing an operation system and an application program, a monitoring information processing unit for executing the operation system and the application program, and a volatile information storage for storing the number of activations of the operation system. And the switch unit includes a storage unit. And, wherein if the said monitoring unit during execution of the application program fails, the monitoring unit, the number of starts setup message indicating a number of activations of the operating system stored in the volatile information storage unit, wherein the switch And storing the number of times of activation in the storage unit of the switch unit, and then performing a reboot.

  According to the present invention, it is possible to increase the efficiency of failure recovery by performing a process of temporarily powering off and rebooting the monitoring package in which the failure has occurred, so that the time and monitoring from the occurrence of a failure to recovery can be performed. It is possible to shorten the time of the non-monitoring state by the unit.

FIG. 1 is a system configuration diagram showing a configuration of a PON system including an OLT according to Embodiment 1 of the present invention. It is a sequence diagram which shows the monitoring operation | movement in OLT by a monitoring package. FIG. 6 is a block diagram showing an internal configuration of a monitoring package and an internal configuration of an L2 switch package. FIG. 6 is a block diagram showing an internal configuration of a monitoring package and an internal configuration of an L2 switch package. It is a flowchart which shows operation | movement from failure detection of a monitoring part to package reboot completion. FIG. 10 is a sequence diagram showing operations of the monitoring package and the L2 switch package after the occurrence of a failure of the monitoring package. It is a flowchart which shows operation | movement after implementation of package reboot of a monitoring package. It is a sequence diagram which shows operation | movement of each package in OLT including the failure generation | occurrence | production of a monitoring package. (A) And (b) is a figure which shows an example of the table of the frequency | count of starting hold | maintained at L2 switch package. It is a sequence diagram which shows operation | movement of the monitoring package and L2 switch package including the time of failure generation of the monitoring package in the station side communication apparatus based on Embodiment 2 of this invention.

Embodiment 1
FIG. 1 is a system configuration diagram showing a configuration of an OLT 1 as a station-side communication device according to Embodiment 1 of the present invention, and a PON system as an optical communication system including the OLT 1. This PON system is configured to include an OLT 1 and a plurality of ONUs 3 as a plurality of terminal side communication devices connected to the OLT 1 via an optical fiber 2 as an optical transmission medium. The OLT 1 communicates with the ONU 3 through the optical fiber 2.

  The OLT 1 is connected to a management network DCN (Data Communication Network) 4 and an OpS (Operation System) 5 that is a control system that controls the entire PON system via the DCN 4 and to the upper network 6. It is done. The OLT 1 is supplied with power from an external power supply 17 (external power supply).

  The maintenance person can monitor the OLT 1 and the ONU 3 by the OpS 5. It is desirable that various packages in the PON system have a redundant configuration. By adopting the redundant configuration, even if a failure or failure occurs in one package, operation can be maintained by another similar package.

  The OLT 1 includes a plurality of PON packages 11 (PON interfaces) as a plurality of interface units having a PON interface function for terminating an optical line on the station side, a plurality of switch units 14 for relaying the plurality of PON packages 11 and the upper network 6, And a monitoring unit 12 that monitors the state of the switch unit 14. Each of the plurality of PON packages 11 is connected to the optical fiber 2. The switch unit 14 is connected between the plurality of PON packages 11 and the upper network 6. The monitoring unit 12 is connected to the switch unit 14.

  The monitoring unit 12 has a monitoring package 12a and a monitoring package 12b. By providing a plurality of monitoring packages, the monitoring unit 12 can have a redundant configuration. Each of the monitoring packages 12a and 12b is connected to the L2 switch packages 14a and 14b. The monitoring unit 12 uses the monitoring package (for example, the monitoring package 12a or 12b) on the active side (operating system) to monitor the monitoring package on the standby side (for example, the monitoring system 12a or 12b), and the switch The monitoring control for monitoring the state of the unit 14 is performed, and the monitoring control for monitoring the state of the plurality of PON packages 11 is performed via the switch unit 14. Alternatively, each of the monitoring packages 12a and 12b may be directly connected to each of the plurality of PON packages 11, and the status of the plurality of PON packages 11 may be monitored by the monitoring package 12a or 12b. Also, the status of the plurality of PON packages 11 may be monitored by the monitoring package 12a or 12b via another package different from the L2 switch packages 14a and 14b.

  The monitoring package not on the active side (for example, the monitoring package 12a or 12b) is the monitoring package on the standby side (for example, the monitoring package 12a or 12b), and the active side and the standby side are monitoring unit switching control described later. It is switched by the monitoring package switching control unit 13 as a unit.

  The switch unit 14 includes an L2 switch package 14a (L2 switch # 1) and an L2 switch package 14b (L2 switch # 2). The L2 switch packages 14a and 14b have a function of link aggregation (IEEE 802.3ad Link Aggregation). Each of the L2 switch packages 14a and 14b is a LAN switch (L2 switch) that relays communication in the second layer (data link layer) of the OSI (Open Systems Interconnection) reference model.

  Each of the plurality of PON packages 11 mounted inside the OLT 1 is connected to the ONU 3 through the optical fiber 2 and the optical coupler 15 which are transmission media of optical signals, and each of the plurality of ONUs 3 is a subscriber terminal Connected to 16.

  Each of the plurality of L2 switch packages 14a and 14b in the OLT 1 is connected to the upper network 6 and the PON package 11 via an interface (I / F).

  The OLT 1 further includes a monitoring package switching control unit 13 as a monitoring unit switching control unit connected to each of the plurality of monitoring packages 12a and 12b. The monitoring package switching control unit 13 has a CPU that executes control to switch between the active state and the standby state of the monitoring package, and switches the monitoring package in the active state to the standby state when a failure occurs in the monitoring package in the active state. At the same time, one of the monitoring packages in the standby state is switched to the active state. For example, control is performed to switch one of the monitoring packages 12a and 12b to the active side (operating side) and the other to the standby side (standby side). Therefore, the maintenance person can monitor the status of the OLT 1 and the ONU 3 from the OpS 5 through the monitoring package on the active side (for example, the monitoring package 12 a).

  FIG. 2 is a sequence diagram showing a monitoring operation in the OLT 1 by the monitoring package 12a. In the example shown in FIG. 2, the monitoring package 12a is on the active side, and the monitoring package 12b is on the standby side. The monitoring package 12a on the active side transmits status collection messages m11 to each of the monitoring package 12b on the standby side, the L2 switch package 14a, the L2 switch package 14b, and the plurality of PON packages 11 by the CPU 125a to monitor the cycle of each package I do. The status collection message m11 is a message (signal) for collecting the operation status of the transmission destination. Also, each package that has received the status collection message m11 transmits a status notification message m12, which is a message (signal) for notifying the operating status, to the monitoring package 12a.

  For example, in the non-redundant configuration of the monitoring unit 12 (including the case where the monitoring unit 12 is configured as a single system), if the monitoring unit 12 breaks down, the maintainer can not monitor the OLT 1. Therefore, in the PON system including the OLT according to the first embodiment, a redundant configuration is adopted in the monitoring unit 12 in consideration of a case where a failure or a failure occurs in the monitoring unit 12. For example, the monitoring unit 12 has the monitoring package 12a and the monitoring package 12b, and when a failure or failure occurs in the monitoring package 12a on the active side, the monitoring package 12b switches to the active side, and a failure or failure occurs. The monitoring package 12a switches to the standby side. Therefore, by adopting a redundant configuration in the monitoring unit 12, for example, when a failure or failure occurs in the monitoring package 12a on the active side, the maintenance person uses the monitoring package 12b switched from the standby side to the active side. The OLT 1 can be monitored.

  FIG. 3 is a block diagram showing an internal configuration of the monitoring package 12a and an internal configuration of the L2 switch packages 14a and 14b.

  The monitoring package 12a includes a nonvolatile storage unit 120a, a central processing unit (CPU) 125a as a monitoring information processing unit, a main memory 126a as a volatile information storage unit, and an Ethernet I / F (interface) 127a. And a power control unit 128a. The monitoring package 12a is, for example, a substrate on which these components are arranged.

  The non-volatile storage unit 120a includes a first flash memory 121a in which an operation system (OS) 210a and an activation determination program 211a are stored, a second flash memory 122a in which a first application program 220a is stored, and a second application program 230a. It has a third flash memory 123a stored, and a fourth flash memory 124a stored the startup surface information 240a.

  The operation system 210a is a system that operates the monitoring package 12a. After the activation of the operation system 210a, the activation determination program 211a determines which program of the first application program 220a or the second application program 230a is to be executed based on the activation surface information 240a.

  Each of the first application program 220a and the second application program 230a is a program that controls each element in the monitoring package 12a to execute monitoring control. That is, the monitoring package 12a has a plurality of storage areas in which application programs of the same type are stored, and for example, when a software failure occurs in the first application program 220a, the monitoring package is switched to the second application program 230a Operation of 12a can be maintained.

  For example, in the non-volatile storage unit 120a, when the second flash memory 122a is set as an operation system storage area for normal operation, the third flash memory 123a is set as a standby system storage area. In this case, the first application program 220a is an operation system application program, and the second application program 230a is a standby application program. In the first application program 220a and the second application program 230a, switching between the active system (active system storage area) and the standby system (standby system storage area) is performed by the activation determination program 211a while the monitoring unit 12 is operating. It can be switched as appropriate.

  Startup surface information that is information indicating whether the application program (application program of the active system) loaded and executed by the CPU 125 a is the first application program 220 a or the second application program 230 a in the fourth flash memory 124 a 240a is stored. For example, it is desirable to use a rewritable non-volatile memory as the fourth flash memory 124 a.

  The CPU 125a controls the activation and execution of the operation system 210a, the execution of the activation determination program 211a, and the execution of the operation system application program (the first application program 220a or the second application program 230a). The main memory 126a stores the number of activations of the operation system 210a.

  The Ethernet I / F (interface) 127a is connected to the Ethernet I / F 143a of the L2 switch package 14a and the Ethernet I / F 143b of the L2 switch package 14b to enable communication between the monitoring package 12a and the L2 switch packages 14a and 14b. .

  The power supply control unit 128 a has a CPU, and controls the supply of power supplied to the monitoring package 12 a (monitoring unit 12) from the power supply 17 external to the monitoring unit 12 and the stop of the supply of power. The power control unit 128a can control the supply and stop of power supply independently of the power control unit 128b of the monitoring package 12b.

  The L2 switch package 14a includes a CPU 141a, a main memory 142a which is a storage unit as a storage medium, and an Ethernet I / F 143a.

  The CPU 141a executes each process in the L2 switch package 14a. The main memory 142a stores the number of activations of the operating system 210a and the operating system 210b transmitted from each of the monitoring packages 12a and 12b. For example, a dynamic random access memory (DRAM) can be used as the main memory 142a. The Ethernet I / F 143a is connected to the Ethernet I / F 127a of the monitoring package 12a and the Ethernet I / F 127b of the monitoring package 12b, and enables communication between the L2 switch package 14a and the monitoring packages 12a and 12b.

  The L2 switch package 14 b includes a CPU 141 b, a main memory 142 b which is a storage unit as a storage medium, and an Ethernet I / F 143 b.

  The CPU 141 b executes each process in the L2 switch package 14 b. The main memory 142 b stores the number of activations of the operating system 210 a and the operating system 210 b transmitted from each of the monitoring packages 12 a and 12 b. For example, a DRAM can be used as the main memory 142 b. The Ethernet I / F 143b is connected to the Ethernet I / F 127a of the monitoring package 12a and the Ethernet I / F 127b of the monitoring package 12b to enable communication between the L2 switch package 14b and the monitoring packages 12a and 12b.

  As shown in FIG. 3, the monitoring package 12a and the L2 switch package 14a are connected via the Ethernet I / F 127a and the Ethernet I / F 143a. The monitoring package 12a and the L2 switch package 14b are connected via the Ethernet I / F 127a and the Ethernet I / F 143b.

  The monitoring package 12a (monitoring unit 12) and the switch unit 14 are supplied with power independently of each other. In the present embodiment, for example, the monitoring package 12a (monitoring unit 12) and the switch unit 14 are supplied with power from different power supplies. That is, the switch unit 14 may be supplied with power from a power supply different from the power supply 17. However, the monitoring unit 12 and the switch unit 14 may be supplied with power from the same power supply 17. In that case, the monitoring unit 12 and the switch unit 14 supply power independently of each other by the control unit in the OLT 1. And stop of the supply is controlled.

  FIG. 4 is a block diagram showing an internal configuration of the monitoring package 12b and an internal configuration of the L2 switch packages 14a and 14b.

  The monitoring package 12 b includes a non-volatile storage unit 120 b, a CPU 125 b as a monitoring information processing unit, a main memory 126 b as a volatile information storage unit, an Ethernet I / F 127 b, and a power control unit 128 b. The monitoring package 12b is, for example, a substrate on which these components are disposed.

  The non-volatile storage unit 120b includes a first flash memory 121b in which an operation system (OS) 210b and an activation determination program 211b are stored, a second flash memory 122b in which a first application program 220b is stored, and a second application program 230b. It has the third flash memory 123b stored, and the fourth flash memory 124b stored the activation surface information 240b.

  The operation system 210b is a system that operates the monitoring package 12b. After the activation of the operation system 210b, the activation determination program 211b determines which program of the first application program 220b or the second application program 230b to execute based on the activation surface information 240b.

  The first application program 220b and the second application program 230b are the same type of program that controls each element in the monitoring package 12b. That is, the monitoring package 12b has a plurality of storage areas in which application programs of the same type are stored, and for example, when a software failure occurs in the first application program 220b, the monitoring package is switched to the second application program 230b and the monitoring package Operation of 12b can be maintained.

  For example, in the non-volatile storage unit 120b, when the second flash memory 122b is an operation system storage area for normal operation, the third flash memory 123b is a standby system storage area. In this case, the first application program 220b is an operation system application program, and the second application program 230b is a standby application program. In the first application program 220b and the second application program 230b, switching between the active system (active storage area) and the standby system (standby storage area) is performed by the activation determination program 211b while the monitoring unit 12 is operating. It can be switched as appropriate.

  Startup surface information, which is information indicating whether the application program (application program of the active system) loaded and executed by the CPU 125 b is the first application program 220 b or the second application program 230 b in the fourth flash memory 124 b. 240b is stored. For the fourth flash memory 124b, for example, it is desirable to use a rewritable non-volatile memory.

  The CPU 125 b controls the activation and execution of the operation system 210 b, and the execution of the activation determination program 211 b and the application program of the operation system (the first application program 220 b or the second application program 230 b). The main memory 126 b stores the number of activations of the operation system 210 b.

  The Ethernet I / F 127 b is connected to the Ethernet I / F 143 a of the L2 switch package 14 a and the Ethernet I / F 143 b of the L2 switch package 14 b to enable communication between the monitoring package 12 b and the L2 switch packages 14 a and 14 b.

  The power supply control unit 128 b has a CPU, and controls the supply of power supplied to the monitoring package 12 b (monitoring unit 12) from the power supply 17 external to the monitoring unit 12 and the stop of the supply of power. The power control unit 128 b can control the supply and stop of power supply independently of the power control unit 128 a of the monitoring package 12 a.

  As shown in FIG. 4, the monitoring package 12b and the L2 switch package 14a are connected via the Ethernet I / F 127a and the Ethernet I / F 143a. The monitoring package 12 b and the L2 switch package 14 b are connected via the Ethernet I / F 127 b and the Ethernet I / F 143 b.

  The monitoring package 12 b (monitoring unit 12) and the switch unit 14 are supplied with power independently of each other. In the present embodiment, for example, the monitoring package 12 b (monitoring unit 12) and the switch unit 14 are supplied with power from different power supplies. That is, the switch unit 14 may be supplied with power from a power supply different from the power supply 17. However, the monitoring unit 12 and the switch unit 14 may be supplied with power from the same power supply 17. In that case, the monitoring unit 12 and the switch unit 14 supply power independently of each other by the control unit in the OLT 1. And stop of the supply is controlled.

  Since the L2 switch package included in the switch unit 14 is connected to the upper network 6, for example, when there is only one L2 switch package, the OLT 1 can be connected to the upper network 6 when the L2 switch package fails. It will not be possible to provide communication service. Therefore, in the present embodiment, in the OLT 1, the switch unit 14 (L2 switch package 14a and L2 switch package 14b) adopts a redundant configuration, and one L2 switch package (for example, L2 switch package 14a or L2). Even if the switch package 14b fails, the provision of communication service can be maintained using another L2 switch package (for example, either the L2 switch package 14a or the L2 switch package 14b). .

  Next, based on FIG. 5, reboot control for controlling the reboot of the monitoring unit 12 including each step from the failure detection (step S1) of the monitoring unit 12 (for example, the monitoring package 12a) to the package reboot completion (step S4). The method will be described.

  FIG. 5 is a flowchart showing an operation from the failure detection (step S1) of the monitoring unit 12 to the package reboot completion (step S4). In the description based on FIG. 5, the operation when the monitoring package 12a is on the active side will be described, but the same operation as the monitoring package 12a is applied also when the monitoring package 12b is on the active side.

  The reboot control method for controlling the reboot of the monitoring package 12a includes a step S1 of detecting a fault when a fault occurs during execution of an application program (for example, the first application program 220a) of the monitoring package 12a, and a main memory The activation frequency setting message m21 indicating the activation frequency of the operation system 210a stored in 126a is transmitted to the switch unit 14 as an external storage medium of the monitoring unit 12, and the switch unit 14 transmits the activation frequency of the operation system 210a. By Step S2 of storing, Step S3 of stopping execution of the operation system 210a by temporarily stopping supply of power from the outside of the monitoring package 12a, and supplying power to the monitoring package 12a again And a step S4 for starting the operating system 210a again.

  Next, based on FIG. 6, an operation after failure detection including the reboot control method of the monitoring unit 12 (for example, the monitoring package 12a) described based on FIG. 5 and an operation of the switch unit 14 will be specifically described. .

  FIG. 6 is a sequence diagram showing operations of the monitoring package 12a and the L2 switch packages 14a and 14b after the failure occurrence of the monitoring package 12a. The example shown in FIG. 6 is an example showing the operation of the monitoring package 12a when the monitoring package 12a is on the active side, but even when the monitoring package 12b is on the active side, the monitoring package 12a shown in FIG. An operation similar to that of is performed.

  As shown in FIG. 6, in the monitoring package 12a on the active side, when a fault occurs (for example, a fault caused by the first application program 220a) when executing an application program of the active system, the CPU 125a detects the occurrence of the fault. (Step S1 shown in FIG. 5), transmits to the switch unit 14 (L2 switch packages 14a and 14b) the activation number setting message m21 indicating the activation number of the operation system 210a stored in the main memory 126a (FIG. 5) Step S2) shown in.

  The activation count setting message m21 is a message (signal) for counting the activation count of the operation system 210a in the switch unit 14. For example, the activation number setting message m21 is set to “+1”, and the activation number of the operation system 210a stored in each of the L2 switch packages 14a and 14b is incremented by one. According to this method, the number of bits of the transmission message can be reduced.

  However, the content of the activation count setting message m21 is not limited to the method of setting “+1”, but the accumulated activation count of the operation system 210a at the time of failure occurrence of the monitoring package 12a (that is, stored in the main memory 126a of the monitoring package 12a The cumulative number of activations) may be the activation number setting message m21. For example, when the cumulative activation number of the operation system 210a at the occurrence of a failure is two, “2” may be the activation number setting message m21. According to the method of setting the accumulated activation number as the activation number setting message m21, when the activation numbers stored in each of the plurality of L2 switch packages 14a and 14b are different from each other, the plurality of L2 switch packages 14a and 14b The number of activations stored in each can be made the same value.

  The L2 switch package 14a that receives the activation count setting message m21 transmitted from the monitoring package 12a updates the activation count of the operation system 210a based on the received activation count setting message m21, and updates the activation count to the main memory Hold at 142a. Similarly, the L2 switch package 14b having received the activation count setting message m21 updates the activation count of the operation system 210a based on the received activation count setting message m21, and holds the updated activation count in the main memory 142b. .

  The plurality of L2 switch packages 14a and 14b that have updated the number of times of activation of the operation system 210a monitor the reception confirmation message m22, which is a message (signal) notifying that the number of times of activation has been updated by the CPU 141a and the CPU 141b. Send to 12a.

  The monitoring package 12a transmits the activation count setting message m21 to the switch unit 14, and stores the activation count of the operation system 210a in the storage unit (for example, the main memory 142a and the main memory 142b) of the switch unit 14, The system 210a is rebooted (steps S3 to S4 shown in FIG. 5).

  In the package reboot (reboot of the monitoring package), the supply of power to the faulty monitoring package 12a is temporarily stopped (step S3 shown in FIG. 5), and the power is supplied to the monitoring package 12a again to operate the operation system. It is executed (deep reboot) by activating 210a again (step S4 shown in FIG. 5). The supply of power to the monitoring package 12a and the stop of the supply are controlled by the power control unit 128a.

  A deep reboot can increase the possibility of recovery as compared to a shallow reboot, since the value remaining as a temporary can be reset to the initial value at each place in the package where the reboot was performed. When there are a plurality of monitoring packages (for example, the monitoring packages 12a and 12b) included in the monitoring unit 12, the power to the monitoring package (for example, the monitoring package 12a) that executes deep reboot is temporarily stopped. The supply of power to other monitoring packages (eg, monitoring package 12b) may not be stopped.

  Next, based on FIG. 7, an operation after the execution of the package reboot of the monitoring unit 12 (for example, the monitoring package 12a) will be described.

  FIG. 7 is a flowchart showing the operation after the execution of the package reboot of the monitoring package 12a. In the description based on FIG. 7, an operation after the execution of the package reboot of the monitoring package 12a will be described, but the same operation as the monitoring package 12a is applied to the monitoring package 12b.

  The monitoring package 12a executes package reboot and starts up the operation system 210a again (step S5). For example, the execution of the operation system 210a is stopped by the CPU 125a, the supply of the power supplied to the monitoring package 12a by the power control unit 128a is stopped, and then the control is performed so that the power is supplied to the monitoring package 12a again. The CPU 125a restarts the operation system 210a.

  The monitoring package 12a causes the CPU 125a to start the operation system 210a, and then causes the CPU 125a to transmit a start number readout message m31 to the switch unit 14 (L2 switch packages 14a and 14b), and the storage unit (for example, L2 switch of the switch unit 14) The number of activations stored in the main memories 142a and 142b) provided in each of the packages 14a and 14b is acquired. The activation number readout message m31 is a message (signal) for acquiring the activation number stored in the switch unit 14.

  The monitoring package 12a updates the number of activations based on the number of activations read from the storage unit of the switch unit 14 (for example, the main memories 142a and 142b provided in each of the L2 switch packages 14a and 14b). The number of activations after the update is stored in the main memory 126a in 12a (step S6).

  When the monitoring package 12a acquires the number of activations from each of the plurality of L2 switch packages 14a and 14b, the number of activations acquired from the L2 switch package 14a may differ from the number of activations acquired from the L2 switch package 14b. is there. For example, when detecting a fault in the monitoring package 12a, if the monitoring package 12a is removed from the OLT 1, L2 can not be received if either of the L2 switch packages 14a or 14b can not correctly receive the activation count setting message m21 from the monitoring package 12a. A difference occurs in the number of activations held in each of the switch packages 14a and 14b.

  Therefore, when the monitoring package 12a acquires the number of activations stored in each of the plurality of L2 switch packages (for example, the L2 switch packages 14a and 14b), the acquired plurality of activations do not match each other The largest value among the acquired number of activations is set as the number of activations after the update, and the number of activations after the update is stored in the main memory 126a in the monitoring package 12a.

  After updating the number of activations stored in the main memory 126a of the monitoring package 12a, the activation determination program 211a is activated. The CPU 125a executes the activation determination program 211a to determine the application program to be loaded based on the number of activations stored in the main memory 126a (step S7). If the number of activations of the operation system 210a (that is, the number of activations stored in the main memory 126a) is equal to or greater than a preset set value, the activation surface information 240a is rewritten (step S8). Therefore, when the number of activations of the operation system 210a is equal to or more than a preset set value, the application program executed by the monitoring unit 12 is stored in the standby storage area from the application program stored in the operation storage area. Switch to application program.

  For example, when the operation system application program is the first application program 220a, the activation surface information 240a is rewritten so that the operation system application program is switched to the second application program 230a (step S8). In this case, the rewritten activation surface information 240 a indicates that the second application program 230 a is an operation application program and the first application program 220 a is a standby application program. The preset setting value can be set to any number of times.

  When the activation surface information 240a is rewritten, the number of activations of the operation system 210a held in the main memory 126a of the monitoring package 12a is cleared to zero (step S9).

  After the number of activations held in the main memory 126a is cleared, the CPU 125a executes the activation determination program 211a, and based on the rewritten activation surface information 240a, an application program for operation system (for example, the third flash) The application program to be executed is switched by loading the second application program 230a) stored in the memory 123a (step S10).

  On the other hand, in the determination of the number of activations (step S7), when the updated number of activations does not reach the preset number, the CPU 125a executes the activation determination program 211a and is stored in the fourth flash memory 124a. Based on the activation surface information 240a, the operation system application program (for example, the first application program 220a stored in the second flash memory 122a) is loaded (step S10).

  The monitoring package 12a switched from the active side to the standby side maintains at least the activated state (hot standby state) of the operation system 210a until it switches to the active side next time.

  Since the monitoring unit 12 and the switch unit 14 are supplied with power independently of each other, the monitoring package 12a in which a failure has occurred can be rebooted independently of the L2 switch packages 14a and 14b. Therefore, even if the monitoring package 12a is rebooted, the number of activations of the operation system 210a recorded in the L2 switch packages 14a and 14b is not affected. That is, by rebooting the monitoring package 12a, even if the power supply of the monitoring package 12a is temporarily turned off, the number of activations held in the L2 switch packages 14a and 14b can be maintained.

  Even when the monitoring package 12b is on the active side, the same processing as the example shown in FIGS. 6 and 7 is executed in the monitoring package 12b, and the number of times of activation of the operation system 210a of the monitoring package 12a and the monitoring package 12b The number of activations of the operation system 210b is counted independently of each other.

  Next, an operation of the monitoring package switching control unit 13 when a failure occurs in the monitoring unit 12 (the monitoring package 12a or 12b) will be described.

  FIG. 8 is a sequence diagram showing the operation of each package in the OLT 1 including the failure occurrence time of the monitoring packages 12a and 12b. FIGS. 9A and 9B are diagrams showing an example of a table of the number of activations held in the L2 switch packages 14a and 14b.

  When a fault occurs in the monitoring package 12a when the monitoring package 12a is on the active side, the CPU 125a detects the occurrence of the fault and monitors a fault occurrence message m41 which is a message (signal) notifying that the fault has occurred. It is transmitted to the package switching control unit 13. Note that instead of the method of the monitoring package 12a transmitting the failure occurrence message m41, a method of the monitoring package switching control unit 13 detecting a failure occurrence of the monitoring package 12a may be adopted.

  The monitoring package switching control unit 13 that has received the failure occurrence message m41 executes the switching operation (monitoring package switching) of the monitoring package. For example, the CPU provided in the monitoring package switching control unit 13 transmits a control signal m42 for switching between the active side and the standby side to the monitoring package 12b to switch the monitoring package 12b from the standby side to the active side.

  The monitoring package 12a transmits the activation count setting message m21 to the L2 switch packages 14a and 14b, respectively. As shown in FIG. 9A, the L2 switch package 14a that receives the activation count setting message m21 updates the activation count of the operation system 210a shown in the table 144a based on the received activation count setting message m21. . Similarly, the L2 switch package 14b that has received the activation count setting message m21 updates the activation count of the operation system 210a shown in the table 144b based on the received activation count setting message m21.

  Each of the L2 switch packages 14a and 14b divides the plurality of monitoring packages 12a and 12b into, for example, a secondary slot and a long slot, and manages the number of activations for each monitoring package. In the example shown in FIG. 9A, the table 144a indicates the number of activations stored when the activation frequency holding ra1 in the L2 switch package 14a is executed. In other words, this indicates that the number of activations of the operation system 210a in the smaller numbered slot (monitoring package 12a) among the plurality of monitoring packages is one, and the activation of the operation system 210b in the old numbered slot of the monitoring package (monitoring package 12b) Indicates that the number is 0.

  Similarly, the table 144b indicates the number of activations stored when the activation frequency holding rb1 in the L2 switch package 14b is executed. That is, it indicates that the number of times of activation of the operation system 210a in the smaller numbered slot (monitoring package 12a) among the plurality of monitoring packages 12a and 12b is one, and the operation system in the old numbered slot (monitoring package 12b) of the monitoring package It shows that the number of times of activation of 210 b is zero. As shown in FIG. 9A, normally, the table 144a of the L2 switch package 14a and the table 144b of the L2 switch package 14b have the same contents.

  If a failure occurs in the monitoring package 12b on the active side after the package reboot of the monitoring package 12a, the CPU 125b detects the occurrence of the failure and transmits a failure occurrence message m41 to the monitoring package switching control unit 13. Note that instead of the method of the monitoring package 12b transmitting the failure occurrence message m41, a method of the monitoring package switching control unit 13 detecting a failure occurrence of the monitoring package 12b may be adopted.

  The monitoring package switching control unit 13 that has received the failure occurrence message m41 executes the switching operation (monitoring package switching) of the monitoring package. For example, the CPU provided in the monitoring package switching control unit 13 transmits a control signal m42 for switching between the active side and the standby side to the monitoring package 12a to switch the monitoring package 12a from the standby side to the active side.

  The monitoring package 12b transmits the activation count setting message m21 to the L2 switch packages 14a and 14b, respectively. As shown in FIG. 9B, the L2 switch package 14a that has received the activation count setting message m21 updates the activation count of the operation system 210b shown in the table 145a based on the received activation count setting message m21. . Similarly, the L2 switch package 14b that receives the activation count setting message m21 updates the activation count of the operation system 210b shown in the table 145b based on the received activation count setting message m21.

  In the example shown in FIG. 9B, the table 145a indicates the number of activations stored when the activation frequency holding ra2 in the L2 switch package 14a is executed. That is, it indicates that the number of times of activation of the operation system 210a in the smaller numbered slot (monitoring package 12a) among the plurality of monitoring packages 12a and 12b is one, and the operation system in the old numbered slot (monitoring package 12b) of the monitoring package It shows that the number of times of activation of 210 b is one.

  Similarly, the table 145 b indicates the number of activations stored when the activation frequency holding rb2 in the L2 switch package 14 b is executed. That is, it indicates that the number of times of activation of the operation system 210a in the smaller numbered slot (monitoring package 12a) among the plurality of monitoring packages 12a and 12b is one, and the operation system in the old numbered slot (monitoring package 12b) of the monitoring package It shows that the number of times of activation of 210 b is one.

  According to the first embodiment, the number of activations of the operation system (for example, the operation system 210a) of the monitoring unit 12 (for example, the monitoring package 12a) is set to the switch unit 14 (for example, L2) as a storage medium different from the monitoring unit 12. Monitoring unit volatile memory (volatile memory different from the main memory 126a) such as SRAM for storing the number of activations before and after deep reboot performed in the monitoring unit 12 because it is stored in the switch package 14a) It is not necessary to provide 12 and an inexpensive OLT 1 can be obtained.

  Since the power supplied to the monitoring unit 12 and the power supplied to the switch unit 14 are supplied independently of each other, the operation system (for example, the operation system 210 a) is performed before and after the deep reboot of the monitoring unit 12 is performed. The deep reboot of the monitoring unit 12 (for example, the monitoring package 12a) can be executed while maintaining the state in which the switch unit 14 (for example, the L2 switch package 14a) holds the count of the number of activations). Therefore, it is possible to increase the possibility of recovering from a fault that can not be recovered by shallow rebooting, and operate the application program executed by the monitoring unit when the number of activations of the operation system reaches the preset number. The application program stored in the system storage area can be switched to the application program stored in the standby system storage area.

  As described above, the station-side communication apparatus according to the first embodiment, the optical communication system including the station-side communication apparatus, and the reboot of the monitoring package (monitoring unit 12) provided in the station-side communication apparatus. The reboot control method to control can increase the efficiency of failure recovery in the case where a failure occurs in the monitoring unit 12, and therefore reduce the time from the occurrence of the failure to the recovery and the time of the non-monitoring state by the monitoring unit 12. Thus, a highly reliable station-side communication device and optical communication system can be realized.

Second Embodiment
FIG. 10 is a sequence diagram showing operations of the monitoring package 12a and the L2 switch packages 14a and 14b including a failure occurrence time of the monitoring package 12a in the station-side communication device according to the second embodiment of the present invention. The station-side communication apparatus according to the second embodiment and the optical communication system including the station-side communication apparatus temporarily monitor a monitoring package (monitoring unit 12) in which a failure has occurred from the OLT 1 when a failure occurs in the monitoring unit 12. Unlike the station-side communication device according to the first embodiment and the optical communication system including the station-side communication device only in the removal point, the other points are the station-side communication device according to the first embodiment, and the station It is similar to the optical communication system including the side communication device. Therefore, in the station-side communication device according to the second embodiment and the optical communication system including the station-side communication device, the same as the station-side communication device according to the first embodiment and the optical communication system including the station-side communication device Alternatively, the corresponding components are denoted by the same reference numerals as the station-side communication apparatus according to the first embodiment and the components in the optical communication system including the station-side communication apparatus.

  When a failure occurs in the monitoring unit 12 (the monitoring package 12a or 12b), the monitoring package in which the failure has occurred may be removed from the OLT 1 in order to repair or replace the monitoring package in which the failure has occurred. Therefore, in the second embodiment, an operation when removing the monitoring unit 12 (for example, the monitoring package 12a) from the OLT 1 when a failure occurs in the monitoring unit 12 (for example, the monitoring package 12a) will be described.

  Although the example shown in FIG. 10 is an example showing the operation of the monitoring package 12a when the monitoring package 12a is on the active side, the same as the operation of the monitoring package 12a when the monitoring package 12b is on the active side. Action is performed.

  When the CPU 125a detects a failure in the monitoring package 12a, the CPU 125a transmits an activation number setting message m21 to the L2 switch packages 14a and 14b. The L2 switch packages 14a and 14b update the activation count based on the received activation count setting message m21.

  The monitoring package 12a performs reboot (package reboot) of its own package after transmitting the activation count setting message m21. The operation from the detection of a fault to the completion of the package reboot is the same as the operation described in the first embodiment (for example, the operation shown in FIG. 5).

  When the monitoring unit 12 (for example, the monitoring package 12a) is removed from the OLT 1 after the package reboot is performed, the switch unit 14 (L2 switch packages 14a and 14b) is monitored by the CPU 141a or the CPU 141b, for example. , Detects that the monitoring package 12a has been removed from the OLT 1, and clears the number of activations (for example, the number of activations of the operation system 210a) stored in the switch unit 14 (that is, updates it to zero). For example, in the case where the monitoring unit 12 includes a plurality of monitoring packages, it is sufficient to clear only the number of activations of a monitoring package (for example, the monitoring package 12a) in which a failure has occurred.

  The timing at which the switch unit 14 (L2 switch packages 14a and 14b) updates the number of times of activation to zero is not limited to the detection of removal of the monitoring unit 12 (for example, the monitoring package 12a) in which a failure has occurred. . The number of activations stored in the switch unit 14 may be updated to zero when a new monitoring unit 12 (for example, the monitoring package 12a) is inserted into the OLT 1 by repair or replacement.

  According to the second embodiment, a new monitoring unit 12 (for example, the monitoring package 12a) is inserted into the OLT 1 when the monitoring unit 12 (for example, the monitoring package 12a) in which a failure has occurred is removed or replaced. In this case, by updating the number of activations stored in the switch unit 14 (L2 switch packages 14a and 14b) to zero, the count of activations can be initialized at the time of recovery from the failure.

  In addition, a fault in the monitoring unit 12 (for example, the monitoring package 12a) is obtained by combining data held in the monitoring unit 12 (for example, the monitoring package 12a) and data held in the switch unit 14 (L2 switch packages 14a and 14b). If it is caused by the non-coincidence, the data (for example, the count of the number of times of activation) held in the switch unit 14 can be initialized to recover from the failure.

  In each embodiment described above, although the case where the number of monitoring packages is two was described as an example, the number of monitoring packages is not limited to two. In each of the embodiments described above, the case where the number of L2 switch packages is two has been described as an example, but the number of L2 switch packages is not limited to two, and may be one or three or more. It may be.

  Further, in each of the embodiments described above, the switch unit 14 (including a package different from the monitoring unit 12) is used to set the number of activations of the operation system (for example, the operation system 210 a) of the monitoring unit 12 (for example, the monitoring package 12 a) For example, although an example of storing in the L2 switch package 14a) has been described, the external storage medium of the monitoring unit 12 (for example, another package different from the monitoring unit 12) storing the activation count is limited to the switch unit 14. Absent. For example, the number of activations may be stored in a package to which power is supplied independently of the supply of power to the monitoring unit 12.

  1 station-side optical termination device (station-side communication device), 2 optical fibers (optical transmission medium), 3 subscriber-side optical termination device (terminal-side communication device), 4 DCN, 5 OpS, 6 upper network, 11 PON package ( Interface unit), 12 monitoring units, 12a and 12b monitoring packages, 13 monitoring package switching control units, 14 switching units, 14a and 14b L2 switch packages, 15 optical couplers, 16 subscriber terminals, 17 power supplies, 120a and 120b nonvolatile storage 121a, 121b first flash memory 122a, 122b second flash memory 123a, 123b third flash memory 124a, 124b fourth flash memory 125a, 125b CPU (information processing unit for monitoring) 126a, 126b In-memory (volatile information storage unit), 127a, 127b Ethernet I / F, 128a, 128b power control unit, 141a, 141b CPU, 142a, 142b main memory (storage unit), 143a, 143b Ethernet I / F.

Claims (13)

In a station-side communication device that communicates with a terminal-side communication device through an optical transmission medium,
A plurality of interface units connected to the optical transmission medium;
A switch unit connected between the plurality of interface units and the upper network and relaying the plurality of interface units and the upper network;
A monitoring unit connected to the switch unit to monitor the states of the plurality of interface units and the switch unit;
Equipped with
The monitoring unit
A non-volatile storage unit storing an operation system and an application program;
A monitoring information processing unit that executes the operation system and the application program;
A volatile information storage unit storing the number of times of activation of the operation system;
Have
The switch unit has a storage unit,
When a failure occurs in the monitoring unit at the time of execution of the application program, the monitoring unit sends the activation number setting message indicating the number of activations of the operation system stored in the volatile information storage unit to the switch unit. A station side communication apparatus characterized by transmitting and storing the number of times of activation in the storage unit of the switch unit, and then performing a reboot. The monitoring unit further includes a power control unit configured to control supply of power supplied from a power supply external to the monitoring unit and stop of the supply.
The station side according to claim 1, wherein the power supply control unit temporarily stops the supply of the power to the monitoring unit and the power supply is supplied again to the power supply control unit. Communication device. After the execution of the rebooting, the monitoring unit acquires the number of activations stored in the storage unit of the switch unit and stores the number of activations in the volatile information storage unit. The station-side communication device described. The non-volatile storage unit has an active storage area for storing a first application program as the active application program and a standby storage area for storing a second application program as the standby application program. The station side communication apparatus according to any one of claims 1 to 3, characterized in that The application program executed by the monitoring unit switches from the first application program to the second application program when the number of activations stored in the volatile information storage unit is equal to or greater than a preset setting value. The station side communication apparatus according to claim 4,   The station side communication apparatus according to any one of claims 1 to 5, wherein the monitoring unit and the switch unit are supplied with power independently of each other.   The method according to any one of claims 1 to 6, wherein, when the monitoring unit is removed after the reboot, the number of times of activation stored in the storage unit of the switch unit is cleared. The station-side communication device described. The switch unit has a plurality of L2 switch packages each provided with the storage unit,
If the fault on the monitoring unit has occurred, the monitoring unit, wherein the number of starts setup message and sends to each of the plurality of L2 switches package to store the number of activations in each of the storage unit The station side communication apparatus according to any one of claims 1 to 7, wherein After execution of the rebooting, the monitoring unit acquires the number of times of activation stored in the storage unit provided in each of the plurality of L2 switch packages,
9. The volatile information storage unit according to claim 8, wherein the largest value among the acquired plurality of activation times is stored in the volatile information storage unit when the acquired plurality of activation times do not match each other. Station-side communication device.   10. The monitor according to any one of claims 1 to 9, wherein the monitor includes a plurality of monitor packages each including the non-volatile storage unit, the information processing unit for monitoring, and the volatile information storage unit. The station-side communication device according to item 1. It further comprises a monitoring unit switching control unit for switching each of the plurality of monitoring packages to either the active state or the standby state,
The monitoring unit switching control unit, if the said monitoring package in the active state failure, switches the the monitoring package in the active state to the standby state, one of the monitoring package was standby any one The station-side communication device according to claim 10, wherein the monitoring package is switched to an active state. In an optical communication system in which a station communication device and a terminal communication device are connected via an optical transmission medium,
The station side communication device
A plurality of interface units connected to the optical transmission medium;
A switch unit connected between the plurality of interface units and the upper network and relaying the plurality of interface units and the upper network;
A monitoring unit connected to the switch unit to monitor the states of the plurality of interface units and the switch unit;
Equipped with
The monitoring unit
A non-volatile storage unit storing an operation system and an application program;
A monitoring information processing unit that executes the operation system and the application program;
A volatile information storage unit storing the number of times of activation of the operation system;
Have
The switch unit has a storage unit,
When a failure occurs in the monitoring unit at the time of execution of the application program, the monitoring unit sends the activation number setting message indicating the activation number of the operation system stored in the volatile information storage unit to the switch unit. An optical communication system characterized by transmitting and storing the number of times of activation in the storage unit of the switch unit, and then performing a reboot. A non-volatile storage unit disposed inside a station-side communication device that communicates with a terminal-side communication device through an optical transmission medium and storing an operation system and an application program, and a monitoring information processing system executing the operation system and the application program A reboot control method for controlling a reboot of a monitoring unit having a unit, a volatile information storage unit storing the number of times of activation of the operation system, and a power supply control unit controlling supply of power and stop of supply,
When a failure occurs in the monitoring unit when the application program is executed, a plurality of activation number setting messages indicating the number of activations of the operation system stored in the volatile information storage unit are connected to the optical transmission medium Relaying the interface unit and the upper network , transmitting to the switch unit disposed inside the station-side communication apparatus, and storing the number of activations in the storage unit of the switch unit ;
The power supply control unit temporarily stops the supply of the power to stop the execution of the operation system, and the power is supplied again to restart the operation system, whereby the reboot of the monitoring unit is performed. A reboot control method comprising the steps of

Images