KR20040033956A - Metro ethernet network Management system using VLAN configuration information and VPN's priority information and method thereof - Google Patents

Abstract

PURPOSE: A system for managing a metro Ethernet network using VLAN(Virtual LAN) configuration information and weight information by VPN(Virtual Private Network) and a method therefor are provided to enable a network management operator to set importance by VPN, and to firstly take measures for a failure of a VPN having high importance when abnormal traffic is generated, thereby efficiently managing the network. CONSTITUTION: A weight supply module(4) supplies weight every VPN. A VPN weight information DB(3) stores weight information by VPN, which is supplied from the weight supply module(4). When a network equipment or a port fails or abnormal traffic is generated, a network management module(5) retrieves the weight information from the VPN weight information DB(3), puts priorities according to weight degrees, and resolves the failed network equipment or the port or the abnormal traffic. A VLAN configuration information DB(1) stores VLAN configuration information. A VLAN configuration information management module(2) collects/analyzes interface information of VPN equipment, collects VLAN configuration information, and stores/manages the VLAN configuration information in the VLAN configuration information DB(1).

Description

Metro Ethernet network management system using virtual LAN configuration information and weight information for each virtual private network {Metro ethernet network Management system using VLAN configuration information and VPN's priority information and method

The present invention relates to a macro Ethernet network management system using the virtual LAN configuration information and the weight information for each virtual private network, and a method thereof. A virtual private network having a high weight when failure and abnormal traffic occurs by using weight information for each virtual private network. By prioritizing customers and processing them, efficient network management is possible.

Conventionally, the operation cost of using expensive SDH equipment is increased by using a standard technology Synchronous Digital Hierarchy (hereinafter referred to as SDH) equipment for synchronous data transmission on optical media. There was a big problem.

In addition, such SDH equipment is inefficient in bandwidth utilization, and has a problem such as a bottleneck of the network.

An object of the present invention for solving the above problems, the network management operator to set the priority for each virtual private network, so that in the event of failure and abnormal traffic occurs, the priority processing and measures for the virtual private network of high importance. There is.

1 is a block diagram of a network management system using virtual LAN (VLAN) configuration information and virtual private network (VPN) weighting information according to the present invention.

2 is a flowchart of managing virtual LAN configuration information according to the present invention;

3 is a flowchart for assigning a weight to each virtual private network according to the present invention.

4 is a network management flowchart according to virtual LAN configuration information and virtual private network weights according to the present invention.

The present invention for achieving the above object is a weighting module for weighting each hypothesis private network, a virtual private network weighting information database for storing the virtual private network weighting information given from the weighting module, network equipment or port When a failure or abnormal traffic occurs, the network management module for resolving the failure or abnormal traffic by retrieving the weight information from the weight information database for each virtual private network, giving priority to the degree of weight.

The above and other objects and features and advantages of the present invention will become more apparent from the following detailed description taken in conjunction with the accompanying drawings. Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

1 is a configuration diagram of a network management system using virtual LAN configuration information and virtual private network weight information according to the present invention, including a virtual LAN (VLAN) configuration information database (1), a virtual LAN configuration information management module (2), and virtual A weight information database 3, a weighting module 4, and a network management module 5 for each private network are disclosed.

The virtual LAN (VLAN) configuration information database 1 stores virtual LAN configuration information constituting a virtual private network. Here, the virtual LAN is a local area network having a concept of mapping workstations based on access port units, MAC addresses, IP address units, protocol units, etc., rather than geographical locations.

The virtual LAN configuration information management module 2 manages the virtual LAN configuration information for the virtual private networks configured as a single network having a local LAN in the Metro Ethernet network with a virtual LAN setting function provided by each network device. That is, it manages the mapping information between the physical port and the virtual private network port of each network device, a virtual LAN tag and a virtual LAN ID for configuring one virtual private network in a macro Ethernet network.

The virtual private network weight information database 3 stores the virtual private network weight information. Here, a virtual private network (VPN) is a data network in which public infrastructure is configured for the purpose of an individual company using tunneling protocols and security procedures, and can be used by only one company. This is in contrast to the dedicated line.

In other words, the virtual private network allows all companies to share the public network and receive almost the same service as the leased line, while sharing the public network.

The weighting module 4 considers factors such as the number of customers and total bandwidth in the virtual private network composed of one network, and assigns the weight for the network management by the virtual private network from the service provider's point of view.

That is, from the service provider's point of view, a large weight is given to a virtual private network of a high priority customer in consideration of a large customer having a large number of physical ports constituting the virtual private network and the overall bandwidth size. Therefore, network monitoring is given priority to the severity of the failure and abnormal traffic occurring in the network equipment.

The network management module 5 retrieves virtual LAN configuration information from the above-described virtual LAN configuration information database 1, retrieves virtual private network weight information from the virtual private network weight information database 3, and the corresponding virtual LAN configuration information. And by using the weighted information for each virtual private network assigned by the operator, real-time monitoring is performed by increasing the priority on the severity of faults and abnormal traffic occurring in the virtual private network of high importance from the service provider's point of view.

In addition, by distinguishing and monitoring the traffic inside the virtual private network and the traffic outside the virtual private network, an abnormal traffic such as spam mail is detected in a specific virtual private network. In other words, it detects an abnormal situation propagating inside the virtual private network or the entire Ethernet as a mat so that action can be taken early.

2 is a flowchart of managing virtual LAN configuration information according to the present invention.

First, interface information of each network device is collected through a simple network management protocol (hereinafter referred to as SNMP) (S20).

The information collected in the above-described step S20 is analyzed and stored in a port table (not shown) included in the virtual LAN configuration information management module 2 (S21), and the virtual LAN configuration information is collected through SNMP (S22). ).

The collected virtual LAN configuration information is analyzed and classified into three cases, and the virtual LAN configuration information is stored in the virtual LAN configuration information database 2 (S23).

At this time, the three criteria for distinguishing are first, when the physical port of one network equipment is set to several virtual LAN, and second, when one physical port is set to one virtual LAN in one network equipment, third In this case, it is the case that the ports of several devices in the macro Ethernet network are configured as one unique virtual LAN.

3 is a flowchart for assigning a weight to each virtual private network according to the present invention. First, a case of configuring ports of various devices in a macro Ethernet network as one unique virtual LAN, that is, configuring a virtual private network is searched (S30).

The searched virtual private networks are sorted in descending order of the number of physical ports constituting each virtual private network (S31), and the sorted results are sorted in descending order according to the total size of bandwidth allocated to all physical ports in the virtual private network. (S32).

In step S31 and S32, 20% of virtual private network lists sorted from the top are divided into five classes, weighted, and the result is stored in the virtual private network weight information database 3 (S33). ).

4 is a network management flowchart according to virtual LAN configuration information and virtual private network weights according to the present invention.

First, check the equipment and port in the event of a failure of the network equipment, or abnormal traffic such as spam mail (S40).

It is determined whether the port identified in the above-mentioned step (S40) is a port related to the virtual private network (S41), and if the port is not related to the virtual private network, the operator is notified that a failure or abnormal traffic has occurred in the equipment or port in the node. (S42).

On the other hand, if the port associated with the virtual private network, the weighted information of the virtual private network is retrieved from the weighted information database 3 for each virtual private network (S43), and it is determined whether the port occurred associated with the virtual private network is disabled or abnormal traffic ( S44).

If a failure occurs in the above-described step (S44), the operator is notified that a failure of a grade assigned to a specific virtual private network occurs among the five grades assigned according to the weight of the corresponding virtual private network (S45), and according to the priority according to the virtual private network failure grade. Check the details of the equipment or port and take action for the failure (S46).

On the other hand, if the abnormal traffic in the above-described step (S44), the bandwidth is limited, and the operation such as stopping the operation of the port is performed, thereby preventing the propagation of the abnormal traffic entering or exiting the virtual private network (S47).

As such, by using the virtual LAN technology, the customers who use the virtual private network by using the virtual LAN configuration information that constructs the virtual private network as if each of the geographically separated customers use a single network and configure the virtual private network Monitor virtual private network traffic for.

At this time, the network management operator sets the importance level for each virtual private network, so that the failure management and action for the high priority virtual private network at the time of failure and abnormal traffic can be efficiently managed.

As described above, according to the present invention, the abnormal traffic and faults occurring in a specific virtual private network are prevented from being propagated to an external macro ethernet and a backbone network or propagated into the virtual private network at an early stage, and thus the operability and service of the Ethernet network. It has the effect of improving quality.

In addition, a preferred embodiment of the present invention is for the purpose of illustration, those skilled in the art will be able to various modifications, changes, substitutions and additions through the spirit and scope of the appended claims, such modifications and changes are the following claims It should be seen as belonging to a range.

Claims (6)

A weighting module for weighting each hypothesis private network; A virtual private network weight information database for storing the virtual private network weight information given from the weighting module; And When a failure or abnormal traffic occurs in the network equipment or port, the virtual information including a network management module for resolving the failure or abnormal traffic by retrieving the weight information from the weight information database for each virtual private network, prioritizing according to the weighting degree Metro Ethernet network management system using LAN configuration information and weight information for each virtual private network. The method of claim 1, A virtual LAN configuration information database for storing virtual LAN configuration information constituting the virtual private network; And And collecting and analyzing interface information of the virtual private network device, and collecting and analyzing the virtual LAN configuration information, and storing and managing the virtual LAN configuration information in the virtual LAN configuration information database. Metro Ethernet network management system using information and weight information for each virtual private network. The method of claim 1, wherein the weighting module, The physical ports constituting the virtual private network are sorted in ascending order, and the sorted results are arranged in order of the total size of the bandwidth allocated to all the physical ports in the virtual private network, and the sorted results are arranged in a plurality of steps. Metro Ethernet network management system using the virtual LAN configuration information and the virtual private network weighting information, characterized in that the divided weights. A collecting step of collecting and storing configuration information of a virtual LAN constituting a virtual private network; A weighting step of weighting each virtual private network using the virtual LAN configuration information collected and stored from the collecting step, and storing the weighting information; And When failure or abnormal traffic occurs in the network equipment and port, the network is given priority according to the weight information given in the weighting step, and the network which processes the failure or abnormal traffic of the virtual private network having high priority as a priority. The management method; Macro Ethernet network management method using the virtual LAN configuration information and the weight information for each virtual private network having a. The method of claim 4, wherein the weighting step comprises: A search step of searching for the virtual LAN configuration information constituting the virtual private network; A first sorting step of sorting the configuration information in ascending order of the number of physical ports constituting the virtual private network; A second sorting step of sorting the sorted result from the first sorting step according to the total size of the bandwidth allocated to the physical port; A division step of dividing the result sorted by the second alignment step into a plurality of steps; And And a storage step of assigning and storing a weight for each division step, and the method of managing a macro Ethernet network using weight information for each virtual private network. The method of claim 4, wherein the network management step, Confirming whether a failure or abnormal traffic has occurred in the network equipment and the port; A determination step of determining whether the network device or port where the failure or abnormal traffic has occurred is a network device or port related to a virtual private network; A search step of searching for weight information of the virtual private network if a failure or abnormal traffic of the network equipment or port related to the virtual private network; A disability processing step of processing a disability of a virtual private network having a high weight according to the weight information in the case of a disabled person; And In the case of abnormal traffic, a method for managing a macro Ethernet network using virtual LAN configuration information and weighted information for each virtual private network is provided with an abnormal traffic processing step of limiting or stopping an operation of the virtual private network.