KR100453816B1 - Apparatus and method for supporting high fidelity MPLS-VPN service - Google Patents

Abstract

The present invention relates to an apparatus and method for efficiently supporting QoS and also to provide path protection for implementing a high reliability MPLS-VPN in an MPLS-VPN providing a VPN service on an MPLS basis. The device supporting the high reliability MPLS-based VPN service includes a high reliability MPLS-VPN service routing device, a high reliability MPLS-VPN group utilization device, a high reliability MPLS-VPN LSP mapping information release device, a high reliability MPLS- There are LSP release device for VPN, routing information update device for high reliability MPLS-VPN, and alternative route setting device for high reliability MPLS_VPN. The method for supporting the high-reliability MPLS-based VPN service includes a method for establishing a high-reliability MPLS-VPN service route, a method for utilizing multiple groups for the high-reliability MPLS-VPN, a method for releasing LSP mapping information for the high-reliability MPLS-VPN, and a high-reliability MPLS- There are LSP release method for VPN, routing information update method for high reliability MPLS-VPN, alternative route setting method for high reliability MPLS_VPN. According to the present invention, when the MPLS VPN service supports QoS, one LSP can be designed to be used by multiple VPN groups at the same time, so that the number of LSPs to be set up by the operator can be greatly reduced. If so, there is an effect that traffic can flow to a new alternate path.

Description

Apparatus and method for supporting high fidelity MPLS-VPN service}

The present invention provides a high reliability MPLS by supporting a virtual private network service device and method for efficiently providing a virtual private network (VPN) service on a communication network such as a multi-protocol label switching (MPLS) network or the like. An apparatus and method for realizing a VPN service.

MPLS improves the performance of the IP network by routing Internet Protocol (IP) packets only at the time of network input / output and by switching at high speed using labels in the center of the network. Set the Label Switched Path (LSP), which is a channel, to operate in a connected manner.

In other words, MPLS is a transport mechanism designed to provide IP flexibility and scalability while providing Asynchronous Transfer Mode (ATM) or Quality of Service (QoS) of frame relay. It has a structure that is easy to provide enhanced IP service that can be provided in IP network, that is, virtual private network (VPN), "Voice over IP", "Video over IP", web hosting, e-commerce, traffic engineering mechanism. have.

The basic idea behind MPLS is to perform label swapping by forwarding different control modules together. The control module can be a basic unicast routing module, a traffic engineering module, a VPN module, or the like. The LSP, which is a connection in the MPLS network, is set by the Label Distribution Protocol (LDP), which is a connection establishment protocol of MPLS, and the packet delivery by the LSP is efficiently and quickly performed by using a short header called label. Will be sent.

Currently, the commercialized VPN technology mainly uses the IP Security Protocol (IPSEC), and MPLS-based VPN technologies are commercialized to overcome the disadvantages of the VPN using IPSEC. The MPLS-based VPN service can effectively provide QoS and path protection by using traffic engineering technology. By combining the traffic engineering technology and VPN technology provided by the MPLS technology, network operators can manage the network efficiently and create a profit model using the VPN service. Currently, many companies have commercialized MPLS-based VPN technology, and a lot of research is ongoing.

MPLS-based VPN technology can easily support QoS guarantees and path protection, and is highly scalable and easy to implement. An object of the present invention is to propose an apparatus and method for efficiently supporting a QOS and a path protection function to implement a high reliability MPLS-based VPN service. The device supporting the high reliability MPLS-based VPN service includes a high reliability MPLS-VPN service routing device, a high reliability MPLS-VPN group utilization device, a high reliability MPLS-VPN LSP mapping information release device, a high reliability MPLS- There are LSP release device for VPN, routing information update device for high reliability MPLS-VPN, and alternative route setting device for high reliability MPLS_VPN. The method for supporting the high-reliability MPLS-based VPN service includes a method for establishing a high-reliability MPLS-VPN service route, a method for utilizing multiple groups for the high-reliability MPLS-VPN, a method for releasing LSP mapping information for the high-reliability MPLS-VPN, and a high-reliability MPLS- There are LSP release method for VPN, routing information update method for high reliability MPLS-VPN, alternative route setting method for high reliability MPLS_VPN. Based on the above inventions, one VPN can be shared by multiple VPN subscribers, thereby providing VPN service with a small number of LSPs.

1 is an overall configuration diagram of an apparatus for providing a conventional MPLS-VPN service.

2 shows the contents of various tables managed by the VPN function block.

3 illustrates a procedure of setting an existing VPN LSP and using the set LSP in the MPLS-VPN execution unit.

4 is a block diagram of a high reliability MPLS-VPN service path setting device of the present invention.

5 is a block diagram of a subscriber-side interface setting unit according to the present invention.

6 shows information delivered from the MPLS-VPN execution unit to the forwarding entry generator.

7 is a configuration diagram of the LSP setting unit for the high reliability MPLS-VPN according to the present invention.

8 shows set LSP information and forwarding information for MPLS-VPN.

9 shows an example in which one VPN is used by several VPN groups.

10 is a configuration diagram of the LSP multiple group utilization apparatus for the high reliability MPLS-VPN of the present invention.

11 is a block diagram of a device for releasing LSP mapping information for high reliability MPLS-VPN according to the present invention.

12 is a block diagram of the LSP release device for high reliability MPLS-VPN of the present invention.

Fig. 13 is a configuration diagram of the LSP release device for high reliability MPLS-VPN according to the present invention.

14 is a configuration diagram of an alternative route setting apparatus for the high reliability MPLS-VPN according to the present invention.

15 shows an interface of an alternate route setting unit.

16 is a flowchart of a method of establishing a high reliability MPLS-VPN service path according to the present invention.

17 is a flowchart for setting up a subscriber-side interface.

18 is a flowchart for setting an internal channel for the LSP for the high reliability MPLS-VPN.

19 is a flowchart of a method of utilizing the LSP multiple group for the high reliability MPLS-VPN of the present invention.

20 is a flowchart illustrating a method of releasing LSP mapping information for high reliability MPLS-VPN according to the present invention.

21 is a flowchart of a method of releasing an LSP for the high reliability MPLS-VPN according to the present invention.

22 is a flowchart of a routing information updating method for the high reliability MPLS-VPN according to the present invention.

23 is a flowchart of a method for establishing an alternate path for the high reliability MPLS-VPN according to the present invention.

The present invention for solving the above problems consists of the device invention, the method invention and the recording medium invention.

The present invention is composed of various device inventions and method inventions required to enhance existing MPLS VPN service functions and to ensure high reliability. The device invention includes a high reliability MPLS-VPN service routing device, a high reliability MPLS-VPN multiple group utilization device, a high reliability MPLS-VPN LSP mapping information release device, a high reliability MPLS-VPN LSP release device, a high reliability MPLS -Routing information updating device for VPN, and alternative path setting device for high reliability MPLS_VPN. The method invention includes a method for establishing a high-reliability MPLS-VPN service path, a method for utilizing multiple groups for high-reliability MPLS-VPN, a method for releasing LSP mapping information for high-reliability MPLS-VPN, a method for releasing LSP for high-reliability MPLS-VPN, and a high-reliability MPLS -Routing information update method for VPN and alternative path setting method for high reliability MPLS_VPN.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is an overall configuration diagram of an apparatus for providing a conventional MPLS-VPN service.

The apparatus for providing the MPLS-VPN service includes an operator command receiving unit 11, an MPLS-VPN service performing unit, a routing information transmitting unit, an IPOA setting unit for VPN, an LSP setting request unit, an LSP setting unit, a forwarding entry generating unit, and a forwarding unit. It consists of an engine.

The operator command receiving unit 11 receives an MPLS-VPN service related command from the operator. The MPLS-VPN service performing unit 12 receives the MPLS-VPN service related command from the operator command receiving unit to perform the MPLS-VPN service. It is actually a block for providing MPLS VPN services, in which MPLS VPN services such as VPN group and site management, routing table management for VPN, site-specific LSP management and VPN label management, and information generation and delivery for forwarding entry creation. Performs all functions to provide. The routing information transceiver 13 receives and transmits general routing information and VPN routing information from the operator command receiver. The routing information transmitting and receiving unit 13 serves to deliver routing information and VPN related information generated or deleted in the MPLS-VPN to the peers. In addition, the routing information for VPN is transmitted to the MPLS-VPN service performing unit 12 so that the MPLS-VPN service performing unit 12 manages it. That is, the routing information transmitting and receiving unit 13 performs only a role of transmitting and receiving routing information for VPN, and the MPLS-VPN service performing unit 12 performs all functions for a VPN service, thereby performing the MPLS-VPN service performing unit. 12 and the routing information transmitting and receiving unit 13 can be performed independently. The VPN IPOA setting unit 14 is a block for setting a VPN IPOA network, and is assigned a VPN interface name from this block.

The LSP setting requester 15 receives LSP information from the operator command receiving unit and requests LSP setting. The LSP setting request unit 15 is a block that manages subscriber information for setting up the LSP, various information for LSP information and path protection, and requests LSP setting through an operator command. The LSP setting unit 16 sets an LSP according to the LSP setting request of the LSP setting request unit 15. The LSP setting unit 16 actually has a protocol such as LDP / CR-LDP / RSVP-TE as a block for setting and releasing the LSP according to the LSP setting request received from the LSP setting request unit 15. The forwarding entry generation unit 17 stores the LSP information transmitted from the LSP setting unit 16 and generates a forwarding entry from the stored LSP information. The forwarding entry generator 17 is a block for performing resource management and internal channel setting, and for transmitting various channel information and forwarding entries to the forwarding engine. The forwarding engine 18 receives the forwarding entry from the forwarding entry generator 17 and forwards the packet. That is, the forwarding engine 18 looks up and transmits packets according to the forwarding entry and various channel information.

In FIG. 1, VIF1 is an interface for processing various commands related to a VPN, and VIF2 is an interface for setting an IPOA network for a VPN and is assigned an interface name for a VPN. VIF3 is an interface to receive subscriber information, QoS information, and LSP information from the operator for LSP configuration. The interface is used to configure and release LSP for VPN. VIF4 is an interface for triggering (triggering) for setting and releasing LSP, and transfers LSP information and internal connection information to the forwarding entry generation unit 17 through VIF5, and forwarding entry and switch internal channel information through VIF8. To the forwarding engine 18. VIF6 is an interface for delivering configured or released LSP information to the VPN. The VIF7 also transmits internal channel establishment request and forwarding entries related to the LSP and subscriber interface information. VIF9 is an interface for transferring routing information added and deleted to the peer, or receiving newly changed routing information from the peer.

In FIG. 1, vpn_group_t manages subscriber information, and vpn_rib_t is a table for managing a VPN routing table. In addition, vpn_psth_t represents a forwarding entry reflected in the forwarding engine, and vpn_lsp_t manages LSP information for VPN and group information using the LSP. Finally, vpn_inf_t is a table for managing subscriber side interface information.

2 shows the contents of various tables managed by the VPN function block.

3 illustrates a procedure of setting an existing VPN LSP and using the set LSP in the MPLS-VPN execution unit.

The operator requests the LSP setting unit to set the LSP for VPN through the LSP setting request unit (step 1). Signaling protocols that receive this request establish an LSP according to an internal procedure (step 2). When requesting the LSP setup, the LSP can support QoS by specifying the QoS of the LSP. The above information is transmitted to the forwarding engine generator and the forwarding engine (steps 3 and 4). The set LSP information is transmitted to the MPLS-VPN performing unit, where the LSP information includes QoS related information (steps 5 and 6). Request the forwarding engine generator to set the switch internal channel related to the set LSP (step 7), and the forwarding engine generator set the switch internal channel related to the LSP (step 8), and transmit the result to the forwarding engine (step 8). Step 9).

struct {

LspId // LSP ID

LspInfAddr // Interface address to the MPLS network

TrafficType // Traffic Type of LSP (UBR, rt-VBR, nrt-VBR, CBR, etc.)

TrafficPCR // PCR

TrafficSCR // SCR

TrafficMBS // MBS

TrafficCDVT // CDVT

}

An apparatus for implementing a procedure of setting a switch internal path for the LSP set in step 5 is illustrated in FIG. 7 below. LSP for VPN can be used by one or more VPN groups. This has the advantage of reducing the number of LSPs by allowing one VPN to be used by multiple VPN groups. Once the LSP is set up, the operator decides which group will use the set LSP and maps the LSP to the group. By performing this mapping procedure, the mapped group can use the LSP. The mapping procedure is the sixth step, and the apparatus for implementing the mapping procedure is illustrated in detail in FIGS. 10, 11, and 12 below.

4 is a block diagram of a high reliability MPLS-VPN service path setting device of the present invention.

The high reliability MPLS-VPN service path setting device includes a subscriber side interface setting unit 46 and a high reliability MPLS-VPN LSP setting unit 47.

The high reliability MPLS-VPN service path setting device includes an ingress forwarding engine 41, an egress forwarding engine 44, an inlet vishing merging (VC-merging) 42, 43, an outlet vishing merging, And an MPLS Label Edge Router (LER) including a switch 45. The forwarding engine 41 is a device for looking up the incoming traffic and delivering it to a destination, and the bsi merging 42 is a device for merging traffic. Switch 45 also represents a switch for handling ATM traffic. The BMS merging function of the MPLS multiplexes Asynchronous Transfer Mode (ATM) cells received from various channels in units of ATM Adaptation Layer 5 (AAL5) frames for each VCC (Virtual Channel Connection), and the same for ATM cells having the same destination. Create an ATM cell with a label (VPI (Virtual Path Identification) / VCI (Virtual Channel Identification). Therefore, the scalability of the network is guaranteed by increasing the number of VCCs available in the MPLS network.

The subscriber side interface setting unit 46 sets the subscriber side interface at the front end of the inlet forwarding engine 41 or at the rear end of the outlet forwarding engine 44. The high reliability MPLS-VPN service path setting device 47 sets an internal channel for the high reliability MPLS-VPN LSP at the switch 45.

The path setting from the supply subscriber to the inlet forwarding engine 41 is performed by the subscriber side interface setting unit, and the path setting from the inlet forwarding engine to the exit vishing merging through the inside of the switch is the high reliability MPLS-VPN service path setting device. (47). The path setting from the exit Vish merging to the inlet forwarding engine of the other label edge router indicates the LSP set through the LSP setting request unit 15 and the LSP setting unit 16, and again from the inlet forwarding engine of the other label edge router. The high reliability MPLS-VPN service path setting device 47 sets the path to the exit VMS merging through the inside of the switch. The routing from the exit VMS merging of the other label edge router to the receiving subscriber uses the already established VPN label.

5 is a block diagram of the subscriber-side interface setting unit 46 of the high reliability MPLS-VPN service path setting device of the present invention.

The subscriber interface setting unit includes an MPLS-VPN service packet determining unit, a group channel setting unit, and an internal channel setting unit.

The MPLS-VPN service packet determiner 51 determines packets that receive the MPLS-VPN service among the packets input from the front end of the inlet forwarding engine 41. In the MPLS-VPN service packet determination unit 51, the logical interface (port, vpi, vci) of the subscriber side is used for the VPN service. Decide When the group channel setting unit 52 determines the packets receiving the MPLS-VPN service by the MPLS-VPN service packet determining unit, when the packets receiving the MPLS-VPN service are the same group, Set up an internal channel that connects to the inlet vice merging within the group. When the subscriber A and the subscriber B belong to the same VPN group, the group channel setting unit 52 sets an internal channel for transferring traffic between the groups.

The internal channel setting unit 53 sets an internal channel connecting the packets output from the rear end of the outlet forwarding engine to the inlet VMS merging through the switch. The internal channel setting unit 53 sets an internal channel for delivering traffic input from the MPLS network to the subscriber. The internal channel setting unit 53 sets an internal channel accompanied by a QoS parameter that connects packets output from the rear end of the outlet forwarding engine to the inlet BMS merging through the switch. That is, the internal channel setting unit 53 delivers QoS parameters to guarantee QoS when the incoming traffic is delivered to the subscriber.

FIG. 6 illustrates information transferred from the MPLS-VPN execution unit to the forwarding entry generator in order to perform the devices of FIG. 5.

7 is a configuration diagram of the LSP setting unit 47 for the MPLS-VPN among the high reliability MPLS-VPN service path setting devices of the present invention.

The LLS setting unit 47 for the MPLS-VPN includes a forwarding entry storage unit 71, an LSP 1 table storage unit 72, an LSP 2 table storage unit 73, and an LSP 3 table storage unit 74. have. The MPLS-VPN service execution unit receives the LSP information generated by using the LSP setting request unit and the LSP setting unit, and sets an internal channel for the received LSP information. The forwarding entry storage unit 71 stores a forwarding entry constructed based on a destination address of a packet and a routing distinguisher (RD). The forwarding entry storage 71 indicates a forwarding entry for lookup using the destination address of the incoming packet and the RD of the VPN group determined through the subscriber interface. The LSP 1 table storage unit 72 stores information for setting an internal path in the switch by looking up the forwarding entry. The LSP 2 table storage unit 73 stores information for setting a path from the switch to the outlet branch merging. The LSP 1 table storage unit 72 is a table for determining a switch internal path using the channel information looked up by the forwarding entry storage unit 71, and the LSP 2 table storage unit 73 is forwarded from inside the switch. Indicates the path to the engine. The LSP 3 table storage unit 74 stores information for setting a path from the exit VMS merging to the MPLS network. By looking up the forwarding entry, the LSP to be used by the VPN group is determined. The LSP 3 table storage unit 74 is a table that manages channel information going to the MPLS network by using channel information input from the inside of the switch.

FIG. 8 illustrates set LSP information and MPLS-VPN forwarding information transmitted from the MPLS-VPN service performing unit shown in FIG. 3 to a forwarding entry generation unit.

9 shows an example in which one VPN is used by several VPN groups.

In FIG. 9, PE1 provides differentiated services to three VPN groups with two LSPs. If one LSP is used by one VPN group, the operator must set four LSPs for VPN in PE1 of FIG. That is, two VPN groups (vpn01 and vpn02) from PE1 to PE2 must set up two LSPs, and two VPN groups (vpn01 and vpn03) from PE1 to PE3 must set up two LSPs.

10 is a configuration diagram of the LSP multiple group utilization apparatus for the high reliability MPLS-VPN of the present invention.

10 illustrates an apparatus for utilizing a single LSP by multiple VPN groups. LSP information and VPN group information to use the LSP are input through an operator command, and if routing information exists in the routing table of the corresponding group, forwarding information is generated based on the routing information. The generated information is reflected in the forwarding entry through the forwarding entry generator. The VPN group information receiver 101 receives the VPN group information from the operator. The LSP presence determining unit 102 determines whether an LSP corresponding to the VPN group information of the VPN group information receiving unit exists. If the LSP existence determination unit determines that the LSP exists, the mapping information existence determination unit 103 determines whether mapping information corresponding to the LSP exists. The mapping information presence determination unit 103 outputs an error message when the LSP existence determination unit determines that the LSP does not exist. If the mapping information present determination unit 104 determines that the mapping information exists, the routing information present determination unit 104 determines whether there is routing information corresponding to the mapping information. The routing information present determining unit 104 outputs an error message when the mapping information present determining unit determines that the mapping information does not exist. The forwarding information generation unit 105 generates forwarding information from the routing information when the routing information present determination unit determines that the routing information exists. The forwarding information generation unit 105 builds an LSP information table by reflecting the mapping information when it is determined that the routing information does not exist by the routing information existence determination unit. The forwarding information transfer unit 106 transfers the forwarding information from the forwarding information generator to the forwarding entry generator. The forwarding entry constructing unit 107 receives the forwarding information from the forwarding information transfer unit and constructs a forwarding entry. The LSP information table constructing unit 108 receives the mapping information and constructs an LSP information table.

11 is a block diagram of a device for releasing LSP mapping information for high reliability MPLS-VPN according to the present invention. Represents a device that releases mapping information between LSP information and a VPN group. There is a need for an apparatus that deletes forwarding entries reflected in a forwarding engine while releasing mapping information.

The demapping command receiving unit 111 receives a demapping command from the operator. The LSP existence determination unit 112 determines whether there is an LSP corresponding to the unmapped command of the unmapped command receiver. When the LSP existence determination unit determines that the LSP exists, the mapping information existence determination unit 113 determines whether mapping information corresponding to the LSP exists. The mapping information existence determination unit 113 outputs an error message when the LSP existence determination unit determines that the LSP does not exist. When the mapping information present determination unit 114 determines that the mapping information exists, the routing information present determination unit 114 determines whether the routing information corresponding to the mapping information exists. The routing information present determination unit 114 outputs an error message when the mapping information existence determination unit determines that the mapping information does not exist. The routing information present determination unit 114 outputs an error message when the mapping information existence determination unit determines that the mapping information does not exist. The forwarding deletion information generation unit 115 generates forwarding deletion information from the routing information when it is determined that the routing information exists by the routing information existence determination unit. The forwarding deletion information generator 115 deletes the mapping information from the LSP information table when it is determined by the routing information existence determining unit that the routing information does not exist. The forwarding deletion information transfer unit 116 transfers the forwarding deletion information from the forwarding information generator to the forwarding entry generator. The forwarding entry deletion unit 117 receives the forwarding deletion information from the forwarding deletion information transfer unit and deletes the forwarding entry. The LSP information table deleting unit 118 receives the mapping information and deletes the mapping information from the LSP information table.

12 is a block diagram of the LSP release device for high reliability MPLS-VPN of the present invention.

12 illustrates an apparatus for releasing an LSP through an operator command of the LSP setting request unit. Deleting an LSP deletes all mapping information associated with that LSP. Also, all forwarding entries reflected in the forwarding engine are deleted, and the LSP setting unit is requested to delete the LSP.

The LSP release command receiver 121 receives an LSP release command from an operator. The LSP existence determination unit 122 determines whether an LSP corresponding to the LSP release command of the LSP release command receiving unit exists. When the LSP existence determination unit determines that the LSP exists, the mapping information existence determination unit 123 determines whether mapping information corresponding to the LSP exists. The mapping information present determination unit outputs an error message when the LSP existence determination unit determines that the LSP does not exist. The routing information presence determining unit 124 determines whether the routing information corresponding to the mapping information exists when the mapping information existence determining unit determines that the mapping information exists. The routing information presence determination unit, if it is determined that the mapping information does not exist, by the mapping information existence determination unit, an internal channel deletion request unit requesting to delete the internal channel for the switch, and the MPLS-VPN service execution unit from the An LSP information deletion request unit requesting the LSP information table deletion unit to delete the LSP information; and an LSP information deletion unit that deletes the LSP information from the LSP information table when the LSP information deletion request unit is requested to delete the LSP information. It is composed. The forwarding deletion information generation unit 125 generates forwarding deletion information from the routing information when the routing information existence determination unit determines that the routing information exists. The forwarding deletion information generation unit deletes the mapping information from the LSP information table when it is determined that the routing information does not exist by the routing information existence determination unit. The forwarding deletion information transmitter 126 transfers the forwarding deletion information from the forwarding deletion information generator to the forwarding entry generator. The forwarding entry deletion unit 127 receives the forwarding deletion information from the forwarding deletion information transfer unit and deletes the forwarding entry. The LSP information table deleting unit 128 receives the mapping information and deletes the mapping information from the LSP information table.

Fig. 13 is a configuration diagram of the LSP release device for high reliability MPLS-VPN according to the present invention.

FIG. 13 illustrates a processing apparatus for receiving a newly updated routing information from a peer through a routing information transceiver after the LSP is set and a VPN group to use the LSP is determined. When the routing information transceiver receives the routing information and transmits the result to the MPLS-VPN service execution unit, the MPLS-VPN service execution unit checks whether the LSP used by the corresponding VPN group exists from the LSP information table. If there is an LSP utilized by the VPN group, forwarding information is generated based on the received routing information, and the generated forwarding information is transmitted to the forwarding entry generator to reflect the forwarding engine.

The routing information receiver 131 receives routing information from an operator. The routing information management table building unit 132 constructs a routing information management table by reflecting the routing information of the routing information receiving unit. The mapping information present determination unit 133 determines whether there is mapping information corresponding to the LSP when the routing information management table is constructed by reflecting the routing information. If the mapping information present determination unit 134 determines that the mapping information exists, the routing information present determination unit 134 determines whether the routing information corresponding to the mapping information exists. The routing information present determination unit outputs an error message when the mapping information existence determination unit determines that the mapping information does not exist. The forwarding information generation unit 135 generates forwarding information from the routing information when the routing information present determination unit determines that the routing information exists. When the forwarding information generation unit determines that the routing information does not exist, the forwarding information generation unit constructs an LSP information table by reflecting the mapping information. The forwarding deletion information transfer unit 136 transfers the forwarding deletion information from the forwarding information generator to the forwarding entry generator. The forwarding entry building unit 137 receives the forwarding deletion information from the forwarding deletion information transfer unit to construct a forwarding entry.

14 is a configuration diagram of an alternative route setting apparatus for the high reliability MPLS-VPN according to the present invention. 14 illustrates a path protection device.

The alternate route setting unit 141 sets an alternate route when a failure occurs in the primary route. Interface to notify that a primary path has failed and an alternate path has been established to replace the primary path.

struct {

SubsId // Subscriber information managed in TE function block

ProfileIndex // Subscriber information managed by the TE function block

LspId // newly set LSP ID

BgpNextHop // Relative Peer Address

LspInfAddr // Interface address to the MPLS network

TrafficType // Traffic Type of LSP (UBR, rt-VBR, nrt-VBR, CBR, etc.)

TrafficPCR // PCR

TrafficSCR // SCR

TrafficMBS // MBS

TrafficCDVT // CDVT

}

The main path information deleting unit 142 deletes information related to the main path. It is a device for deleting information related to the main route. This device includes internal channel information deletion, forwarding information deletion, and vpn_lsp_t deletion for each VPN group. The alternate route information adding unit 143 adds information related to the alternate route. A device for adding information related to a newly set alternative route. The forwarding engine completion information reflecting unit 144 reflects the deletion completion information when the deletion is completed in the main path information deleting unit and the addition completion information when the addition is completed in the alternative path information adding unit to the forwarding engine. . This is a procedure for reflecting the result to the forwarding engine. The alternate route information transfer unit 145 transfers information related to the alternate route. The device transmits the result of the processing 144 to the LSP setting request unit. If the result fails, delete all newly set alternate paths.

FIG. 15 illustrates an interface of the alternative route setting unit 141 described with reference to FIG. 14.

16 is a flowchart of a method of establishing a high reliability MPLS-VPN service path according to the present invention.

In an MPLS LER comprising an inlet or outlet forwarding engine, an inlet or outlet bussy merging, and a switch, a subscriber-side interface is established at the front end of the inlet forwarding engine or at the rear end of the outlet forwarding engine (161); The switch establishes an internal channel for the LSP for high reliability MPLS-VPN (162).

17 is a flowchart for setting a subscriber-side interface in the high reliability MPLS-VPN service path setting method of the present invention.

In the case of determining packets receiving the MPLS-VPN service among the packets input from the front end of the inlet forwarding engine, and determining the packets receiving the MPLS-VPN service, the packets receiving the MPLS-VPN service are the same group. In the case of setting an internal channel for connecting to the inlet vishing merging in the group through the switch (171), and the inside of connecting the packets output from the rear end of the outlet forwarding engine to the inlet vishing merging through the switch The channel is set (173).

18 is a flowchart for setting an internal channel for the high reliability MPLS-VPN LSP among the high reliability MPLS-VPN service path setting method of the present invention.

Create a forwarding entry constructed based on the packet's destination address and the RD, and set up an internal path at the switch (182) by looking up the forwarding entry (182), and a path from the switch to the exit vishing merging Set to 183, and set the path from the exit VMS merging to the MPLS network.

19 is a flowchart of a method of utilizing the LSP multiple group for the high reliability MPLS-VPN of the present invention.

Receiving VPN group information from an operator (191), determining whether there is an LSP corresponding to the VPN group information (192), and if it is determined that the LSP exists, it is determined whether mapping information corresponding to the LSP exists. In operation 193, when it is determined that the mapping information exists, it is determined whether the routing information corresponding to the mapping information exists (194), and when it is determined that the routing information exists, forwarding information from the routing information. Generate (195), transfer the forwarding information to the forwarding entry generator (196), construct a forwarding entry by receiving the forwarding information (197), and build an LSP information table by receiving the mapping information ( 198). However, if it is determined that the LSP does not exist, if it is determined that the mapping information does not exist, an error message is output. (199) If it is determined that the routing information does not exist, the LSP is reflected to reflect the mapping information. Build the information table.

20 is a flowchart illustrating a method of releasing LSP mapping information for high reliability MPLS-VPN according to the present invention.

Receiving an unmap command from an operator (201), and determines whether there is an LSP corresponding to the unmap command (202), and if it is determined that the LSP exists, it is determined whether there is mapping information corresponding to the LSP If it is determined that the mapping information exists (203), it is determined whether the routing information corresponding to the mapping information exists (204), and if it is determined that the routing information exists, forwarding deletion information from the routing information. Generate (205), transfer the forwarding deletion information (206), receive the forwarding deletion information, delete the forwarding entry (207), receive the mapping information, and delete it from the LSP information table (208). However, when it is determined that the LSP does not exist or when it is determined that the mapping information does not exist, an error message is output (209). If it is determined that routing information does not exist, the mapping information is deleted from the LSP information table.

21 is a flowchart of a method of releasing an LSP for the high reliability MPLS-VPN according to the present invention.

Receiving an LSP release command from an operator (211), and determines whether there is an LSP corresponding to the LSP release command (212), and if it is determined that the LSP exists, it is determined whether there is mapping information corresponding to the LSP If it is determined that the mapping information exists (213), it is determined whether routing information corresponding to the mapping information exists (214), and if it is determined that the routing information exists, forwarding deletion information from the routing information. Generate (215), transfer the forwarding deletion information (216), delete the forwarding entry by receiving the forwarding deletion information (217), and receive the mapping information and delete it from the LSP information table (218). If it is determined that the LSP does not exist, the LSP existence determination unit outputs an error message (219).

If it is determined that the mapping information does not exist, request to delete the internal channel to the switch (2131), request to delete the LSP information from the LSP information table deletion unit (2132), request to delete the LSP information When received, the LSP information is deleted from the LSP information table (2133).

If it is determined that the routing information does not exist, the mapping information is deleted from the LSP information table.

22 is a flowchart of a routing information updating method for the high reliability MPLS-VPN according to the present invention.

When receiving the routing information from the operator (221), building the routing information management table to reflect the routing information (222), and if the routing information management table is constructed to reflect the routing information, mapping information corresponding to the LSP is It is determined whether there exists (223), if it is determined that the mapping information exists, it is determined whether there is routing information corresponding to the mapping information (224), if it is determined that the routing information exists, the routing information The forwarding information is generated (225), the forwarding deletion information is transferred from the forwarding information generator to the forwarding entry generator (227), and the forwarding deletion information is received to build a forwarding entry (227). However, when it is determined that the mapping information does not exist, when it is determined that the routing information does not exist, an error message is output (228).

23 is a flowchart of a method for establishing an alternate path for the high reliability MPLS-VPN according to the present invention.

If a failure occurs in the main path, the alternative path is set (231), the information related to the main path is deleted (232), the information related to the alternative path is added (233), and the deletion completion information when the deletion is completed and The additional completion information when the addition is completed is reflected to the forwarding engine (234), and information related to the alternative route is transmitted (235).

Meanwhile, the above-described embodiments of the present invention can be written as a program that can be executed in a computer, and can be implemented in a general-purpose digital computer that operates the program using a computer-readable recording medium.

In addition, the structure of the data used in the above-described embodiment of the present invention can be recorded on the computer-readable recording medium through various means.

The computer-readable recording medium may be a magnetic storage medium (for example, a ROM, a floppy disk, a hard disk, etc.), an optical reading medium (for example, a CD-ROM, DVD, etc.) and a carrier wave (for example, the Internet). Storage medium).

So far I looked at the center of the preferred embodiment for the present invention. Those skilled in the art will appreciate that the present invention can be implemented in a modified form without departing from the essential features of the present invention. Therefore, the disclosed embodiments should be considered in descriptive sense only and not for purposes of limitation. The scope of the present invention is shown in the claims rather than the foregoing description, and all differences within the scope will be construed as being included in the present invention.

According to the present invention, MPLS-based VPN technology is easy to apply the traffic engineering technology provided by MPLS to the VPN. In the present invention, the structure, scenario, and interface for MPLS-based VPN service to efficiently provide QoS and path protection technology have been described. This design method does not manage subscriber information, LSP information, and various information for path protection separately for other services. This architecture also reduces the number of LSPs set up for MPLS-VPN by designing one LSP to be used by multiple VPN groups simultaneously. In addition, when delivering the packet input from the MPLS network to the subscriber, it is designed to guarantee the QoS, thereby guaranteeing the QoS inside the system.

Claims (41)

In an MPLS LER comprising an inlet or outlet forwarding engine, an inlet or outlet bussy merging, and a switch, A subscriber side interface setting unit configured to set a subscriber side interface at the front end of the inlet forwarding engine or at the rear end of the outlet forwarding engine; And And a high reliability MPLS-VPN LSP setting unit configured to set an internal channel for the LSP for high reliability MPLS-VPN in the switch. The method of claim 1, wherein the subscriber-side interface setting unit An MPLS-VPN service packet determiner configured to determine packets receiving MPLS-VPN service among packets input from the front end of the inlet forwarding engine; In the case where the MPLS-VPN service packet determining unit determines the packets receiving the MPLS-VPN service, when the packets receiving the MPLS-VPN service are the same group, the switch is configured to the inlet VMS merging through the switch. A group channel setting unit for setting an internal channel to be connected; And And an internal channel setting unit configured to set an internal channel connecting the packets output from the rear end of the outlet forwarding engine to the inlet VMS merging through the switch. The high reliability MPLS of claim 2, wherein the internal channel setting unit sets an internal channel accompanied by a QoS parameter that connects packets output from the rear end of the outlet forwarding engine to the inlet VMS merging through the switch. -VPN service routing device. The LSP setting unit for the high reliability MPLS-VPN according to claim 1 A forwarding entry storage unit configured to store a forwarding entry constructed based on a packet destination address and a route identifier; An LSP 1 table storage unit which stores information for setting an internal path in the switch by looking up the forwarding entry; An LSP 2 table storage unit configured to store information for setting a path from the switch to the outlet VMS merging; And And a LSP 3 table storage unit configured to store information for setting a path from the exit VMS merging to the MPLS network. VPN group information receiving unit for receiving the VPN group information from the operator; An LSP presence determining unit determining whether an LSP corresponding to the VPN group information exists in the VPN group information receiving unit; A mapping information presence determination unit that determines whether mapping information corresponding to the LSP exists when the LSP existence determination unit determines that the LSP exists; A routing information presence determining unit that determines whether the routing information corresponding to the mapping information exists when the mapping information present determining unit determines that the mapping information exists; A forwarding information generator configured to generate forwarding information from the routing information when it is determined that the routing information exists by the routing information present determination unit; A forwarding information transfer unit transferring the forwarding information from the forwarding information generator to the forwarding entry generator; A forwarding entry construction unit receiving the forwarding information from the forwarding information transfer unit and constructing a forwarding entry; And LSP information table construction unit for receiving the mapping information to build an LSP information table, characterized in that it comprises a LSP multiple group utilization apparatus for MPLS-VPN. The apparatus of claim 5, wherein the mapping information presence determining unit outputs an error message when the LSP existence determining unit determines that the LSP does not exist. 6. The apparatus of claim 5, wherein the routing information presence determining unit outputs an error message when it is determined that the mapping information does not exist by the mapping information existence determining unit. . 6. The high reliability MPLS-VPN according to claim 5, wherein the forwarding information generation unit constructs an LSP information table by reflecting the mapping information when it is determined that the routing information does not exist by the routing information existence determination unit. LSP multi-group utilization device. A demapping command receiving unit which receives a demapping command from an operator; An LSP presence determining unit determining whether an LSP corresponding to the unmapped command exists in the unmapped command receiving unit; A mapping information presence determination unit that determines whether mapping information corresponding to the LSP exists when the LSP existence determination unit determines that the LSP exists; A routing information presence determining unit that determines whether the routing information corresponding to the mapping information exists when the mapping information present determining unit determines that the mapping information exists; A forwarding deletion information generation unit generating forwarding deletion information from the routing information when the routing information existence determination unit determines that the routing information exists; A forwarding deletion information transfer unit for transferring the forwarding deletion information from the forwarding information generation unit to the forwarding entry generation unit; A forwarding entry deletion unit receiving the forwarding deletion information from the forwarding deletion information transfer unit and deleting a forwarding entry; And And a LSP information table deleting unit for receiving the mapping information and deleting the LSP information table from the LSP information table. 10. The apparatus of claim 9, wherein the mapping information presence determining unit outputs an error message when the LSP existence determining unit determines that the LSP does not exist. 10. The apparatus of claim 9, wherein the routing information present determination unit outputs an error message when it is determined that the mapping information does not exist by the mapping information existence determination unit. . The high reliability MPLS-VPN of claim 9, wherein the forwarding deletion information generator deletes the mapping information from the LSP information table when it is determined that the routing information does not exist. LSP mapping information release device for. An LSP release command receiving unit receiving an LSP release command from an operator; An LSP presence determining unit determining whether an LSP corresponding to the LSP release command exists in the LSP release command receiving unit; A mapping information presence determination unit that determines whether mapping information corresponding to the LSP exists when the LSP existence determination unit determines that the LSP exists; A routing information presence determining unit that determines whether the routing information corresponding to the mapping information exists when the mapping information present determining unit determines that the mapping information exists; A forwarding deletion information generation unit generating forwarding deletion information from the routing information when the routing information existence determination unit determines that the routing information exists; A forwarding deletion information transfer unit for transferring the forwarding deletion information from the forwarding deletion information generation unit to the forwarding entry generation unit; A forwarding entry deletion unit receiving the forwarding deletion information from the forwarding deletion information transfer unit and deleting a forwarding entry; And And an LSP information table deleting unit for receiving the mapping information and deleting the LSP information table from the LSP information table. 15. The apparatus of claim 13, wherein the mapping information presence determining unit outputs an error message when it is determined that the LSP does not exist by the LSP existence determining unit. The apparatus of claim 13, wherein the routing information present determination unit An internal channel deletion request unit requesting the switch to delete an internal channel when the mapping information existence determination unit determines that the mapping information does not exist; An LSP information deletion request unit requesting to delete the LSP information from the MPLS-VPN service execution unit to the LSP information table deletion unit; And And an LSP information deleting unit for deleting the LSP information from the LSP information table when the LSP information deleting request unit is requested to delete the LSP information. The high reliability MPLS-VPN of claim 13, wherein the forwarding deletion information generation unit deletes the mapping information from the LSP information table when it is determined that the routing information does not exist by the routing information existence determination unit. LSP unlock device. A routing information receiver configured to receive routing information from an operator; A routing information management table building unit for constructing a routing information management table by reflecting the routing information of the routing information receiving unit; A mapping information presence determination unit that determines whether mapping information corresponding to the LSP exists when the routing information management table is constructed by reflecting the routing information in the routing information management table building unit; A routing information presence determining unit that determines whether the routing information corresponding to the mapping information exists when the mapping information present determining unit determines that the mapping information exists; A forwarding information generator configured to generate forwarding information from the routing information when it is determined that the routing information exists by the routing information present determination unit; A forwarding deletion information transfer unit for transferring the forwarding deletion information from the forwarding information generation unit to the forwarding entry generation unit; And And a forwarding entry constructing unit for receiving the forwarding deleting information from the forwarding deleting information transmitting unit and constructing a forwarding entry. 18. The apparatus of claim 17, wherein the routing information present determining unit outputs an error message when the mapping information present determining unit determines that the mapping information does not exist. 18. The apparatus of claim 17, wherein the forwarding information generation unit outputs an error message when it is determined that the routing information does not exist by the routing information existence determination unit. An alternative path setting unit for setting an alternative path when a main path fails; A main path information deleting unit for deleting information related to the main path; An alternate route information adding unit for adding information related to the alternate route; A forwarding engine completion information reflecting unit reflecting the deletion completion information when the deletion is completed in the main path information deleting unit and the addition completion information when the addition is completed in the alternative path information adding unit to a forwarding engine; And Alternate route setting apparatus for high reliability MPLS-VPN characterized in that it comprises an alternate route information transfer unit for transmitting the information related to the alternate route. In an MPLS LER comprising an inlet or outlet forwarding engine, an inlet or outlet bussy merging, and a switch, (a) establishing a subscriber-side interface either at the front of the inlet forwarding engine or at the rear of the outlet forwarding engine; And and (b) setting an internal channel for the LSP for the high reliability MPLS-VPN in the switch. The method of claim 21, wherein step (a) (a1) determining packets receiving MPLS-VPN service among packets input at the front end of the inlet forwarding engine; (a2) In the case of determining the packets receiving the MPLS-VPN service, if the packets receiving the MPLS-VPN service are in the same group, an internal channel connecting to the inlet BMS merging in the group is set through the switch. Doing; And and (a3) setting an internal channel connecting the packets output from the rear end of the outlet forwarding engine to the inlet branch merging via the switch. 23. The method of claim 22, wherein step (a3) sets an internal channel with QoS parameters that connects packets output from the rear end of the outlet forwarding engine to the inlet branch merging via the switch. How to set up the MPLS-VPN service path. The method of claim 21, wherein step (b) (b1) generating a forwarding entry constructed based on the destination address and the RD of the packet; (b2) establishing an internal path at the switch by looking up the forwarding entry; (b3) establishing a path from the switch to the outlet vishing merging; And and (b4) establishing a path from the exit VMS merging to the MPLS network. (a) receiving VPN group information from an operator; (b) determining whether an LSP corresponding to the VPN group information exists; (c) if it is determined that the LSP exists, determining whether mapping information corresponding to the LSP exists; (d) if it is determined that the mapping information exists, determining whether there is routing information corresponding to the mapping information; (e) generating forwarding information from the routing information when it is determined that the routing information exists; (f) transferring the forwarding information to the forwarding entry generator; (g) constructing a forwarding entry by receiving the forwarding information; And (h) receiving the mapping information and constructing an LSP information table, comprising: a method for utilizing a plurality of LSPs for a high reliability MPLS-VPN. 27. The method of claim 25, wherein the step (c) outputs an error message when it is determined that the LSP does not exist. 27. The method of claim 25, wherein in step (d), if it is determined that the mapping information does not exist, an error message is output to the high reliability MPLS-VPN. 27. The method of claim 25, wherein in step (e), if it is determined that the routing information does not exist, an LSP information table is constructed by reflecting the mapping information. . (a) receiving an unmapping command from an operator; determining whether an LSP corresponding to the unmap command exists; (c) if it is determined that the LSP exists, determining whether mapping information corresponding to the LSP exists; (d) if it is determined that the mapping information exists, determining whether there is routing information corresponding to the mapping information; (e) if it is determined that the routing information exists, generating forwarding deletion information from the routing information; (f) conveying the forwarding deletion information; (g) receiving the forwarding deletion information and deleting a forwarding entry; And (h) receiving the mapping information and deleting the LSP mapping information for the high reliability MPLS-VPN, comprising the step of deleting from the LSP information table. 30. The method of claim 29, wherein in step (c), if it is determined that the LSP does not exist, an error message is output. 30. The method of claim 29, wherein in the step (d), if it is determined that the mapping information does not exist, an error message is output. 30. The method of claim 29, wherein in the step (e), if it is determined that the routing information does not exist, the mapping information is deleted from the LSP information table. (a) receiving an LSP release command from an operator; (b) determining whether an LSP corresponding to the LSP release command exists; (c) if it is determined that the LSP exists, determining whether mapping information corresponding to the LSP exists; (d) if it is determined that the mapping information exists, determining whether there is routing information corresponding to the mapping information; (e) if it is determined that the routing information exists, generating forwarding deletion information from the routing information; (f) conveying the forwarding deletion information; (g) receiving the forwarding deletion information and deleting a forwarding entry; And and (h) receiving the mapping information and deleting the LSP information from the LSP information table. 34. The method of claim 33, wherein the step (c) outputs an error message when it is determined by the LSP presence determining unit that the LSP does not exist. The method of claim 33, wherein step (d) (d1) if it is determined that the mapping information does not exist, requesting the switch to delete an internal channel; (d2) requesting to delete the LSP information from an LSP information table deleting unit; And (d3) deleting the LSP information from the LSP information table when requested to delete the LSP information. 34. The method of claim 33, wherein in step (e), if it is determined that the routing information does not exist, the mapping information is deleted from the LSP information table. (a) receiving routing information from an operator; (b) constructing a routing information management table by reflecting the routing information; (c) determining whether mapping information corresponding to the LSP exists when the routing information management table is constructed by reflecting the routing information; (d) if it is determined that the mapping information exists, determining whether there is routing information corresponding to the mapping information; (e) generating forwarding information from the routing information when it is determined that the routing information exists; (f) transferring the forwarding deletion information from the forwarding information generator to the forwarding entry generator; And and (g) receiving the forwarding deletion information and constructing a forwarding entry. 38. The method of claim 37, wherein in step (d), if it is determined that the mapping information does not exist, an error message is output. 38. The method of claim 37, wherein in step (e), if it is determined that the routing information does not exist, an error message is output. Setting an alternative path when the primary path fails; Deleting information related to the main route; Adding information related to the alternative route; Reflecting the deletion completion information when the deletion is completed and the addition completion information when the addition is completed to a forwarding engine; And And a method for establishing an alternative route for the high reliability MPLS-VPN, comprising transmitting information related to the alternative route. 41. A computer-readable recording medium having recorded thereon a program for executing the method of any one of claims 21-40.