WO2010111957A1 - 基于媒体接入控制地址和终结条件实现检测的方法及系统 - Google Patents

基于媒体接入控制地址和终结条件实现检测的方法及系统 Download PDF

Info

Publication number
WO2010111957A1
WO2010111957A1 PCT/CN2010/071479 CN2010071479W WO2010111957A1 WO 2010111957 A1 WO2010111957 A1 WO 2010111957A1 CN 2010071479 W CN2010071479 W CN 2010071479W WO 2010111957 A1 WO2010111957 A1 WO 2010111957A1
Authority
WO
WIPO (PCT)
Prior art keywords
segment
tunnel
detection
backup
endpoint
Prior art date
Application number
PCT/CN2010/071479
Other languages
English (en)
French (fr)
Inventor
林开
魏月华
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2010111957A1 publication Critical patent/WO2010111957A1/zh

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/50—Testing arrangements

Definitions

  • the present invention relates to detection technologies in the field of network communication technologies, and in particular, to a method and system for implementing detection based on media access control (MAC) addresses and termination conditions.
  • MAC media access control
  • PBB Provider Backbone Bridge
  • the IEEE refers to the PBT technology as the carrier backbone bridge technology (PBB-TE, Provider Backbone Bridge Traffic Engineering).
  • PBB-TE carrier backbone bridge technology
  • PBB-TE Provider Backbone Bridge Traffic Engineering
  • PBB-TE is based on PBB technology. Its core is to improve the PBB technology. It uses the outer MAC address and also combines the outer virtual local area network (VLAN) identifier, such as the backbone destination MAC address (B-DA, Backbone). Destination MAC address )
  • VLAN ID B-VID, Backbone VLAN ID
  • the forwarding path is pre-configured.
  • the PBB-TE technology is compatible with the architecture of the traditional Ethernet bridge. It can forward data frames based on B-DA+B-VID without updating the network intermediate nodes. The data frames do not need to be modified, and the forwarding efficiency is high.
  • the PBB-TE technology uses the Connectivity Fault Management (CFM) mechanism of the IEEE 802. lag standard to continuously monitor the tunnel status in the network. When the primary tunnel fails, the service is automatically transferred to the pre-established backup tunnel, which increases the necessity. Flexibility.
  • CFM Connectivity Fault Management
  • FIG. 1 shows the Ethernet tunnel protection when using the existing PBB-TE technology.
  • PE1-P11-P21-P31-PE2 is an end-to-end working tunnel for traffic engineering service instances, PE1 and PE2.
  • PE1-P51-P61-PE2 is the end-to-end backup tunnel of the traffic engineering service instance, and
  • PE1-P51-P61-PE2 is the backup tunnel of PE1-P11-P21-P31-PE2.
  • PE1-P11-P21-P31-PE2 detects a fault, it can switch to PE1-P51-P61-PE2.
  • the virtual LAN identifier (B-VLAN) carried by the tunnel is specified for the working tunnel and the backup tunnel, for example, in the pre-configuration. Specify B-VLAN1 for the working tunnel and B-VLAN2 for the standby tunnel.
  • tunnel connectivity is detected by sending a Continuity Check Message (CCM) in a tunnel, which is defined in the IEEE 802.lag standard.
  • CCM Continuity Check Message
  • the CCMs are sent to each other along the working tunnel and the backup tunnel.
  • the CCM 4 headers of the working tunnel and the backup tunnel encapsulate B-VLAN 1 and B-VLAN 2 respectively.
  • This method implements full path protection of the tunnel. When a certain segment of the path is particularly vulnerable or a certain segment is particularly important, only the local path of the end-to-end tunnel can be protected. In this way, the full-path protection is replaced by local protection to protect the end-to-end tunnel. End tunnel failure recovery speed and reduce the nodes involved in protection switching.
  • P11-P21-P31 is a partial path of the end-to-end working tunnel, that is, PE1-P11-P21-P31-PE2.
  • the local path in the end-to-end tunnel is called a segment.
  • P11-P21-P31 is called the working segment of the end-to-end working tunnel
  • P11-P41-P31 is called the backup segment of P11-P21-P31.
  • the premise is that the B-VLAN attribute of the tunnel on this backup segment cannot be changed, so as to ensure that when switching from the working segment, that is, P11-P21-P31 to the backup segment P11-
  • the B-VLAN attribute of the entire end-to-end working tunnel, that is, PE1-P11-P21-P31-PE2 remains unchanged after P41-P31.
  • the B-VLAN of the segment and the working segment must be the same as the B-VLAN of the end-to-end tunnel, as shown in Figure 1, the backup segment P11-P41-P31, the working segment P11-P21-P31, and the end-to-end working tunnel PE1- P11 -P21 -P31 - PE2 has the same B-VLAN, both of which are B-VLAN 1.
  • the CCM message needs to verify the integrity of the tunnel data path on both the working segment and the backup segment.
  • the attributes of the tunnel are represented by the triples ⁇ ESP-DA, ESP-SA, £8?- ⁇ 10>.
  • ESP is the Ethernet switching path
  • parameter ESP-DA refers to the Ethernet switching.
  • Path destination MAC address parameter ESP-SA refers to the source MAC address of the Ethernet switching path
  • parameter ESP-VID refers to the value of B-VLAN.
  • the triplet refer to the IEEE 802.1Qay standard.
  • PE1-P11-P21-P31-PE2 is represented by a triplet as ⁇ B-MAC2, B-MAC1, B-VLAN1>.
  • B-MAC2 is the MAC address of PE2, which is the destination MAC address
  • B-MAC1 is the MAC address of PE1
  • 8- ⁇ 1 ⁇ 1 is?
  • the segment protection technology of the existing tunnel has two problems as shown below.
  • P11-P21-P31 is used as the working segment and P11-P41-P31 is used as the backup segment.
  • the 1+1 local protection mode is replaced by the working segment and the backup segment.
  • the full path protection is used to protect the end-to-end working tunnels PE1-P11-P21-P31-PE2.
  • Two identical packets are sent out from the two different ports of the P11 along the working segment and the backup segment. Repeated transmission of the same packet increases the complexity of P11 forwarding processing and has a large operational risk on Ethernet devices.
  • P11-P21-P31 is represented by triples as ⁇ MAC-P31, MAC-P11, B-VLAN1>
  • segment data path between P11 and P31 Not equal to the end-to-end data path between the tunnel PE1 and PE2, ie ⁇ MAC-P31, MAC-P11, B-VLAN1> ⁇ B-MAC2, B-MAC1, B-VLAN1>, that is, segment protection
  • the detection path does not match the detection path of the end-to-end protection.
  • the main purpose of the present invention is to provide a method and system for implementing detection based on a MAC address and a termination condition, and performing connectivity detection on a segment corresponding to a tunnel instance based on a MAC address and a termination condition of a tunnel instance endpoint. It can guarantee the reliability of detection, high precision of detection and fast efficiency of detection.
  • a method for implementing detection based on a media access control address and a termination condition comprising: performing connectivity detection on a segment corresponding to a tunnel instance according to a media access control (MAC) address and a termination condition of a tunnel instance endpoint;
  • MAC media access control
  • the segment corresponding to the tunnel instance is divided into a working segment and a backup segment.
  • the MAC address of the tunnel instance endpoint is used as the segment detection packet of the working segment or the destination MAC address of the segment detection packet of the backup segment.
  • the termination condition is specifically as follows: The configuration segment detects that the endpoint belongs to the maintenance domain level that is smaller than the maintenance domain level of the tunnel instance endpoint, and implements the domain level configuration mode to implement the segment detection packet termination.
  • the working segment corresponds to the backup segment, and one working segment and at least one backup segment form a segment protection group (SPG);
  • the tunnel instance is specifically a tunnel instance to which the SPG belongs;
  • the method further includes: encapsulating the segment detection packet of the working segment or the segment detection packet of the backup segment, and using the same encapsulation manner;
  • the B-MAC is encapsulated in the connectivity check message packet, and the virtual local area network identifier (B-VLAN) carried by the SPG tunnel instance and the MAC address (B-MAC) of the tunnel instance endpoint to which the SPG belongs are encapsulated into the connectivity check message packet.
  • the destination MAC address of the connectivity check message After the encapsulating, the method further includes: sending a segment detection packet of the working segment or a segment detection packet of the backup segment;
  • the corresponding FDB is queried in the preset forwarding address database (FDB) table according to the B-VLAN and the B-MAC of the connectivity check message packet. Forwarding the entry, sending a connectivity check message according to the tunnel preset path of the tunnel instance to which the SPG belongs in the FDB forwarding entry;
  • FDB forwarding address database
  • the connectivity check message is sent to the backup outbound interface of the preset SPG.
  • the detecting includes detecting connectivity of the segment detection packet of the working segment or the segment detection packet of the backup segment, and using the same detection mode; the connectivity detection is specifically: On the backup segment, the current segment detection endpoint receives the connectivity check message packet, and when it is determined that the destination MAC address of the connectivity check message packet is different from the MAC address of the current receiving endpoint, the connectivity check message packet is detected. If the maintenance domain level is the same as the maintenance domain level configured on the current segment detection endpoint, the connectivity check message is detected as a segment detection packet, and the local protection of the SPG tunnel instance is detected. Otherwise, , end the current test.
  • a system for performing detection based on a media access control address and a termination condition includes: a detecting unit, configured to perform connectivity detection on a segment corresponding to a tunnel instance according to a MAC address and a termination condition of a tunnel instance endpoint;
  • the segment corresponding to the tunnel instance is divided into a working segment and a backup segment.
  • the MAC address of the tunnel instance endpoint is used as the segment detection packet of the working segment or the destination MAC address of the segment detection packet of the backup segment.
  • the termination condition is specifically as follows:
  • the configuration segment detection endpoint belongs to the maintenance domain level that is smaller than the maintenance domain level of the tunnel instance endpoint, and the domain level configuration mode is adopted to implement the segment detection packet termination.
  • the system further includes: an encapsulating unit, configured to encapsulate the segment detection packet of the working segment or the segment detection packet of the backup segment, and encapsulate the B-VLAN and the B-MAC into the connectivity check message packet.
  • the B-MAC is used as the destination MAC address of the connectivity check message.
  • the system further includes: a sending unit, configured to send a segment detection packet of the working segment or a segment detection packet of the backup segment;
  • the sending unit is configured to send a segment detection packet of the working segment, and query the corresponding FDB table according to the B-VLAN and the B-MAC of the connectivity check message packet
  • the FDB forwarding entry sends a connectivity check message according to the tunnel preset path of the tunnel instance to which the SPG belongs in the FDB forwarding entry;
  • the sending unit is configured to send a segment detection packet of the backup segment, and send a connectivity check message to the backup outbound interface of the preset SPG.
  • the invention implements the connectivity detection of the segment corresponding to the tunnel instance according to the MAC address and the termination condition of the endpoint of the tunnel instance.
  • the termination condition is as follows: Maintain the domain level configuration mode to implement the termination of segment detection packets.
  • the destination MAC address of the segment detection packet is the MAC address of the tunnel instance endpoint. Therefore, the detection path of the segment protection detection packet matches the forwarding path of the end-to-end tunnel instance, and the domain level configuration mode is maintained.
  • the termination condition can be used to terminate the segment detection packet of the segment corresponding to the tunnel instance and implement local detection of the tunnel instance. Therefore, the MAC address of the endpoint of the tunnel instance is combined with the termination condition, and when the end-to-end working tunnel is protected by the partial path protection instead of the full path protection, the local protection detection is performed on the end-to-end working tunnel.
  • the present invention implements detection of local protection of a tunnel instance, including work segment failure detection and backup segment availability detection.
  • detection of local protection of a tunnel instance including work segment failure detection and backup segment availability detection.
  • the fault detection of the working segment can ensure that the segment detection packet is transmitted on the tunnel of the protected tunnel instance, that is, the end-to-end working tunnel transmission path is consistent.
  • Backup segment availability detection ensures the availability of backup segments, thus avoiding switching to an unavailable backup segment when the work segment fails, ie blind switching.
  • the detection method proposed by the present invention does not significantly increase the processing load of the device where the segment detection endpoint is located, and does not affect the forwarding performance of common data packets.
  • FIG. 1 is a schematic diagram of a prior art Ethernet tunnel protection
  • FIG. 2 is a schematic diagram of an implementation process of the method of the present invention.
  • FIG. 3 is a schematic diagram of Ethernet tunnel protection according to the present invention. detailed description
  • the basic idea of the invention is as follows: According to the MAC address and the termination condition of the endpoint of the tunnel instance, the connectivity detection is performed on the corresponding segment of the tunnel instance.
  • the termination condition is specifically as follows: The maintenance domain level of the endpoint belongs to the end of the segment detection packet.
  • the corresponding segment of the tunnel instance is divided into a working segment and a backup segment, and the working segment and the backup segment are corresponding, and the working segment and the backup segment may jointly form a segment protection group (SPG) corresponding to the tunnel instance.
  • SPG includes a working segment and multiple backup segments, and SPG ⁇ is created between the intermediate nodes of the end-to-end working tunnel.
  • the MAC address of the tunnel instance endpoint is used as the working segment. Destination MAC address of the segment detection packet of the segment detection packet or the backup segment.
  • the destination MAC address of the segment detection packet of the working segment or the segment detection packet of the backup segment is the same as the MAC address of the corresponding tunnel instance endpoint, so that the segment protection detection packet forwarding path and the tunnel instance end-to-end The forwarding path is consistent, so that the reliability of the detection can be ensured when the end-to-end working tunnel protection of the tunnel instance is implemented by replacing the full path protection with local protection. As far as the termination condition is concerned, after the reliability of the detection is ensured, the detection accuracy and the detection efficiency are further improved.
  • the segment detection packet of the working segment or the segment detection packet of the backup segment is transmitted according to the MAC address of the endpoint of the tunnel instance.
  • the termination condition is needed to judge. Because the termination condition can quickly determine that the type of the current detection packet is a segment detection packet and implement local detection of the tunnel instance, the detection accuracy and the detection efficiency are greatly improved.
  • the termination condition is as follows:
  • the domain-level configuration mode is used to implement the termination of the segment detection packet.
  • the configuration mode is as follows:
  • the maintenance domain level of the endpoint of the configuration working segment is the same as the maintenance domain level of the backup segment.
  • the segment detection endpoint belongs to the maintenance domain level that is smaller than the maintenance domain level to which the tunnel instance endpoint belongs, thereby implementing the maintenance domain inclusion relationship.
  • the SPG is composed of one working segment and multiple backup segments
  • the tunnel instance is specifically the tunnel instance to which the SPG belongs.
  • the detection of the connectivity of the segment corresponding to the tunnel instance includes: processing the segment detection packet, specifically: encapsulating the segment detection packet of the working segment or the segment detection packet of the backup segment, and encapsulating the working segment
  • the segment detection packet or the segment detection packet of the backup segment is in the same encapsulation mode.
  • the specific processing of the encapsulation mode is as follows: The B-VLAN of the tunnel instance to which the SPG belongs and the MAC address (B-MAC) of the tunnel instance endpoint to which the SPG belongs are encapsulated into the CCM packet, and the B-MAC is used as the CCM packet. Destination MAC address.
  • the method further includes: sending a segment detection packet of the working segment or a segment detection packet of the backup segment,
  • the specific processing of the method is:
  • the FDB table is not queried, and the CCM packet is directly sent to the backup outbound interface of the preset SPG.
  • the peer detection endpoint receives the CCM packet, and detects the CCM packet.
  • the detection includes detecting the segment detection packet of the working segment or the segment detection packet of the backup segment, and using the same detection mode.
  • the specific processing process as shown in Figure 2, includes the following steps:
  • Step 101 On the working segment or backup segment corresponding to the tunnel instance to which the SPG belongs, the current segment detection endpoint receives the CCM packet.
  • Step 102 Detect a maintenance domain level when it is determined that the destination MAC address of the CCM is different from the MAC address of the current receiving endpoint.
  • Step 103 Detect the maintenance domain level in the CCM packet. If the maintenance domain level is the same as the maintenance domain level configured on the current segment detection endpoint, go to step 104. If the maintenance domain level is different from the maintenance domain level configured on the current segment detection endpoint, If yes, go to step 105.
  • Step 104 The CCM packet is detected as a segment detection packet, and the local protection of the tunnel instance to which the SPG belongs is detected.
  • Step 105 End the current detection process.
  • the present invention can implement the segmentation protection of the Ethernet tunnel by detecting the segment detection packet, specifically, the work segment fault detection and the backup segment availability detection. Aspect content. The following describes the work segment fault detection and backup segment availability detection separately.
  • the working segment fault detection method includes the following contents: Step 201: Configure a segment detection endpoint of the working segment on two nodes of one segment of an Ethernet tunnel.
  • the segment detection endpoint corresponds to a tunnel instance, and the segment detection endpoint of the working segment belongs to a management association (MA).
  • MA management association
  • the maintenance domain level configured on the working segment is lower than the maintenance domain level configured on the end-to-end tunnel to implement the maintenance domain inclusion relationship.
  • Step 202 A local segment detection endpoint sends a detection packet along the tunnel to another remote segment detection endpoint, and the destination address of the packet is the MAC address of the tunnel instance endpoint.
  • the detection is performed according to the B-VLAN and B-MAC check FDB table of the tunnel instance to which the segment belongs.
  • Step 203 After receiving the detection packet, the remote segment detection endpoint determines whether the segment detection packet sent by the opposite end of the protection segment is based on the information carried in the detection packet and the segment detection endpoint configuration table. If it is the segment detection packet of the protection segment, the corresponding processing of the segment protection is performed, otherwise further judgment is made to decide to discard or forward.
  • a detection message that satisfies the following three conditions may be a segment detection message:
  • the purpose of detecting the packet MAC address is the MAC address of the endpoint of the tunnel instance
  • the maintenance domain level of the detection packet is the same as the maintenance domain level configured on the current segment detection endpoint.
  • This section detects other information in the endpoint configuration table that can match the sending endpoint.
  • step 204 the segment detecting end of the local end and the remote end repeatedly performs steps 201 to 203 to periodically send a detection packet, and the remote end does not receive the detection packet sent by the peer end in a certain period to determine that the protection segment is faulty. .
  • the backup segment availability detection includes the following contents:
  • Step 301 Configure a backup segment detection endpoint on the two nodes of the backup segment corresponding to the working segment of an Ethernet tunnel, where the backup segment corresponds to the tunnel instance to which the working segment belongs, and the segment segment of the backup segment
  • the endpoint is an MA.
  • the maintenance domain level configured on the backup segment is the same as that of the working segment, and the maintenance domain level is lower than that of the end-to-end tunnel.
  • Step 302 A local segment detection endpoint sends a detection packet along the tunnel to the other remote segment detection endpoint, and the destination address of the packet is the MAC address of the tunnel instance endpoint.
  • the detection packet is sent directly according to the B-VLAN of the tunnel instance to which the segment belongs and the interface to which the backup segment detects the endpoint.
  • the FDB table is not checked.
  • Step 303 After receiving the detection packet, the remote segment detection endpoint determines whether the segment detection packet sent by the peer end of the backup segment is based on the information carried in the detection packet and the segment detection endpoint configuration table. If it is the segment detection packet of the backup segment, the corresponding processing of the segment protection is performed. Otherwise, further judgment is made to decide to discard or forward.
  • a detection message that satisfies the following three conditions may be a segment detection message:
  • the purpose of detecting the packet is that the MAC address is the MAC address of the endpoint of the tunnel instance. 2.
  • the maintenance domain level of the detection packet is the same as the maintenance domain level configured on the current segment detection endpoint.
  • This section detects other information in the endpoint configuration table that can match the sending endpoint.
  • step 304 the segment detecting end of the local end and the remote end repeatedly performs steps 301 to 303 to periodically send a detection packet, and the remote end can receive the detection packet sent by the peer end in a certain period to determine that the backup segment is normal. Therefore, when the working segment fails, it can be switched to the backup segment.
  • a system for implementing detection based on a MAC address and a termination condition comprising: a detection unit, configured to perform MAC address and termination conditions of a tunnel instance endpoint, and implement connectivity detection on a segment corresponding to the tunnel instance.
  • the corresponding segments of the tunnel instance are divided into a working segment and a backup segment.
  • the MAC address of the tunnel instance endpoint is used as the destination MAC address of the segment detection packet of the working segment or the segment detection packet of the backup segment.
  • the termination condition is as follows:
  • the maintenance segment of the configuration segment detection endpoint belongs to the maintenance domain level of the tunnel instance endpoint. The maintenance of the domain level is used to implement segment detection.
  • the system further includes: an encapsulating unit, configured to encapsulate the segment detection packet of the working segment or the segment detection packet of the backup segment, and encapsulate the B-VLAN and the B-MAC carried by the SPG tunnel instance into the connectivity.
  • an encapsulating unit configured to encapsulate the segment detection packet of the working segment or the segment detection packet of the backup segment, and encapsulate the B-VLAN and the B-MAC carried by the SPG tunnel instance into the connectivity.
  • the B-MAC is used as the destination MAC address of the connectivity check message.
  • the system further includes: a sending unit, configured to send a segment detection message of the working segment or a segment detection message of the backup segment.
  • the sending unit is configured to send the segment detection packet of the working segment, and query the corresponding FDB forwarding entry in the preset FDB table according to the B-VLAN and the B-MAC of the connectivity check message packet, and forward the FDB forwarding entry according to the FDB.
  • the tunnel preset path of the tunnel instance to which the SPG belongs in the entry sends a connectivity check message.
  • the sending unit is configured to send a segment detection packet of the backup segment, and send a connectivity check message to the backup outbound interface of the preset SPG.
  • the method embodiment is as follows: ⁇ The above termination condition is used.
  • PE1-P11-P21-P31-PE2 is an end-to-end working tunnel of a traffic engineering service instance
  • PE1 and PE2 are endpoints of the tunnel instance
  • PE1-P51-P61-PE2 is the traffic engineering service.
  • the end-to-end backup tunnel of the instance When the end-to-end working tunnel of the traffic engineering service instance detects a fault, the entire service instance can be switched to the backup tunnel. It is assumed that the failure of the working tunnel is particularly likely to occur between the paths of P11-P21-P31, or that it is necessary to protect this segment for other reasons. Local segment protection can be used, that is, between P11-P21-P31. Partially protected.
  • the P11-P21-P31 segment is part of the PE1 to P2 end-to-end tunnel.
  • the present invention sends detection packets between P11 and P31 to monitor the fault of the working segment P11-P21-P31 and the availability of the backup segment P11-P41-P31.
  • B-VLAN 1 is the VLAN where the PE1 to PE2 end-to-end tunnel is located.
  • the detection packet of the working segment between P1 and P31 and the detection packet of the backup segment carry the same VLAN as the VLAN of the tunnel, all of which are B-VLAN 1.
  • the specific identification value of the B-VLAN in the two directions of the tunnel can be different.
  • the detection packet sent by P11 to P31 is used as an example.
  • the destination address of the packet is the MAC address of the end point of the end-to-end tunnel.
  • the destination address of the detection packet sent by P31 to P11 is the end-to-end tunnel.
  • PE3-P12-P22-P32-PE4 is an end-to-end working tunnel of a traffic engineering instance.
  • PE3 and PE4 are endpoints of the tunnel instance.
  • P12-P42-P32 and P12-P22-P32 constitute one SPG, one SPG contains at least two MAs, and FIG. 3 includes two MAs, which are represented by a first MA71 and a second MA72, respectively.
  • the maintenance domain is first configured on the working segment.
  • the configuration is as follows: The maintenance domain level is lower than the maintenance domain level on the tunnel; then it is configured on the two endpoints P12 and P32 of the working segment.
  • the logical management node is different from the physical nodes P12 and P32.
  • MEP711 is configured on P12
  • MEP712 is configured on P32
  • MEP711 and MEP712 belong to first MA71, MEP711 and MEP712 and end to
  • the configuration information of the end tunnel is associated.
  • the configuration information of the end-to-end tunnel includes B-DA, B-VLAN, and corresponding FDB table entries.
  • the configuration is as follows: The maintenance domain level is lower than the maintenance domain level on the tunnel. Then, configure the two endpoints P12 and P32 on the backup segment. Logically manage nodes to distinguish them from physical nodes P12 and P32. As shown in FIG. 3, MEP721 is configured on P12, MEP722 is configured on P32, and MEP721 and MEP722 belong to second MA72. MEP721 and MEP722 are associated with the configuration information of the end-to-end tunnel.
  • the configuration information of the end-to-end tunnel includes the B-DA, the B-VLAN, and the outbound interface corresponding to the backup segment.
  • the encapsulation method of the segment detection packet of the encapsulation working segment and the backup segment is the same, including the following steps:
  • Step 401 Encapsulate the B-VLAN of the tunnel instance to which the SPG belongs for the CCM second layer header.
  • B-MAC
  • the segment detection is completely consistent with the tunnel.
  • Step 402 Fill the CCM message with other necessary information, such as the Maintenance Association Identifier (MAID) and the Maintenance Association End Point Identifier (MEPID), which are consistent with the international standard.
  • MAID Maintenance Association Identifier
  • MEPID Maintenance Association End Point Identifier
  • the sending mode is the same as that used to send the segment detection packet to the working segment and the backup segment.
  • the device sends a CCM packet to the working segment and the backup segment.
  • the B-VLAN and the B-MAC of the CCM message are used to check the FDB table, and the CCM message is sent according to the tunnel preset path.
  • the backup segment directly sends the CCM message to the backup outbound interface of the SPG, SPG.
  • the backup outbound interface is pre-configured.
  • the MEP When receiving a CCM message, the MEP detects that the CCM message is a segment detection message, and includes the following steps:
  • Step 501 It is determined whether the destination MAC address of the CCM message is the same as the MAC address of the receiving end point. If they are the same, the segment detection message is not processed, and other processing is performed. If not, the process proceeds to step 502.
  • Step 502 Determine whether the CCM message on the segment is a CCM message or a CCM message on the tunnel by using the maintenance domain level encapsulated in the MEL field in the CCM message, and compare whether the MEL field in the common header of the CCM message is equal to the configuration of the endpoint. Maintain the domain level. If they are not the same, go to other processing. If they are the same, go to step 503.
  • Step 503 Verify that other information in the CCM message is consistent with the international standard.
  • Step 504 Confirm that the CCM packet is a segment detection packet and perform corresponding processing.
  • the working segment the fault detection of the working segment is implemented, and segment protection processing is implemented.
  • the backup segment the availability detection of the backup segment is implemented, and segment protection is implemented. deal with.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Description

基于媒体接入控制地址和终结 Ht实现检测的方法及系统 技术领域
本发明涉及网络通信技术领域的检测技术， 尤其涉及一种基于媒体接 入控制 （ MAC )地址和终结条件实现检测的方法及系统。 背景技术
随着电信级以太网 （CE, Carrier Ethernet )概念的提出， 满足电信网络 需求，面向连接的以太网技术——运营商骨干传送（PBT, Provider Backbone Transport )也在 2005年 10月浮出水面。 此后， 国内外均有运营商釆用 PBT 技术组网， 为 PBT技术在城域网内的发展提供了很好的开端。
PBT技术的基础是 IEEE 802.1ah标准定义的运营商骨干桥接 ( PBB, Provider Backbone Bridge )技术， IEEE把 PBT技术称为支持流量工程的运 营商骨干桥接技术 ( PBB-TE, Provider Backbone Bridge Traffic Engineering )。 PBB-TE技术基于 PBB技术， 其核心是对 PBB技术进行改进， 它釆用外层 的 MAC地址， 并同时结合外层的虚拟局域网 （VLAN )标识， 比如骨干目 的 MAC地址（ B-DA, Backbone Destination MAC address ) +骨干 VLAN标 识（B-VID, Backbone VLAN ID )进行业务转发， 转发路径是预先配置的。 通过网络管理和控制，使 CE中的业务事实上具有连接性， 以便实现保护倒 换、 服务质量（QoS )、 流量工程等电信网络的功能。 PBB-TE技术兼容传 统以太网桥的架构， 不需要对网络中间节点进行更新即可基于 B-DA+B-VID对数据帧进行转发， 数据帧也不需要修改， 转发效率高。
PBB-TE 技术釆用 IEEE 802. lag 标准中的连接性故障管理（CFM, Connectivity Fault Management )机制来持续地监视网络中的隧道状态。 当 主用隧道失效时会把业务自动转移到预先建立的备份隧道上， 增加了必要 的弹性。
图 1 所示为釆用现有 PBB-TE技术时以太网隧道保护的示意图， 图 1 中， PE1-P11-P21-P31-PE2为一流量工程服务实例的端到端工作隧道， PE1 和 PE2为该隧道实例的端点； PE1-P51-P61-PE2为该流量工程服务实例的端 到端备份隧道， PE1-P51-P61-PE2即为 PE1-P11-P21-P31-PE2的备份隧道。 那么当 PE1-P11-P21-P31-PE2检测到故障时， 可以切换到 PE1-P51-P61-PE2 上。 并且为了在报文转发时能区别出是在上述工作隧道还是上述备份隧道 上转发， 在预先配置时， 为该工作隧道和该备份隧道分别指定隧道承载的 虚拟局域网标识（ B-VLAN ), 比如为工作隧道指定 B-VLAN1 , 为备用隧道 指定 B-VLAN2。
现有技术中， 通过在隧道中发送连通性检查消息 （CCM , Continuity Check Message )来检测隧道的连通性， CCM是在 IEEE 802. lag标准中定义 的。 隧道端点之间分别沿工作隧道和备份隧道互相发送 CCM , 工作隧道和 备份隧道的 CCM 4艮文头分别封装 B-VLAN1和 B-VLAN2。 这种方法实现 了隧道的全路径保护。 当路径中某一段特别脆弱或者某一段特别重要时， 可以只对端到端隧道的局部路径进行保护， 这样， 以局部保护取代全路径 保护来实现对端到端隧道的保护， 可以提高端到端隧道故障恢复的速度并 减少保护倒换牵涉的节点。 如图 1所示， P11-P21-P31为端到端工作隧道即 PE1-P11-P21-P31-PE2的一部分局部路径， 这里对端到端隧道的局部路径进 行保护时， 为了区别于对端到端隧道的全路径保护， 以下将端到端隧道中 的局部路径称为段。 那么 P11-P21-P31 称为端到端工作隧道的工作段， P11-P41-P31称为 P11-P21-P31的备份段。 而且， 当釆用 P11-P41-P31进行 备份保护时， 前提是这一备份段上隧道的 B-VLAN属性不能改变， 这样才 能保证当从工作段即 P11-P21-P31切换到备份段 P11-P41-P31上后整个端到 端工作隧道即 PE1-P11-P21-P31-PE2的 B-VLAN属性保持不变。 总之， 备 份段与工作段的 B-VLAN必须与端到端隧道的 B-VLAN相同，如图 1所示， 备份段 P11-P41-P31 、 工作段 P11-P21-P31 与端到端工作隧道 PE1-P11 -P21 -P31 -PE2的 B- VLAN相同， 皆为 B- VLAN 1。
如果备份段的可用性处于未知状态， 将存在工作段出现故障时切换到 一个不可用的备份段上的问题， 即盲目切换问题。 为了避免盲目切换问题，
CCM报文需要同时在工作段和备份段上验证隧道数据路径的完整性。 隧道 的属性是通过 <ESP-DA, ESP-SA, £8?-¥10>这种三元组来表示的， 三元组 中， ESP为以太网交换路径， 参数 ESP-DA指以太网交换路径目的 MAC地 址， 参数 ESP-SA指以太网交换路径的源 MAC 地址， 参数 ESP-VID 指 B-VLAN的值， 有关三元组的具体描述可参见 IEEE 802.1Qay标准。 以图 1 从左往右的方向为例，端到端工作隧道即 PE1-P11-P21-P31-PE2以三元组表 示为 <B-MAC2, B-MAC1 , B-VLAN1>。 其中， B-MAC2为 PE2 的 MAC 地址，是目的 MAC地址， B-MAC1为 PE1的 MAC地址，是源 MAC地址， 8-¥1^^1是？£1-?11-?21^31"?£2 的 B- VLAN的值。 釆用现有隧道的段 保护技术存在如下所示的两方面问题。
以 P11向 P31发送才艮文为例， P11-P21-P31作为工作段， P11-P41-P31 作为备份段， 一方面： 以该工作段和该备份段这种 1+1 的局部保护方式取 代全路径保护来实现对端到端工作隧道 PE1-P11-P21-P31-PE2 的保护， 从 P11的两个不同端口沿着工作段和备份段发送两份相同的报文出去。相同报 文重复发送， 增加 P11 转发处理的复杂性， 在以太网设备上有很大的操作 风险。 另一方面： 如果在 P11和 P31之间进行 CCM检测， P11-P21-P31以 三元组表示为 < MAC-P31 , MAC-P11 , B-VLAN1>, 则 P11和 P31之间的 段数据路径不等于隧道 PE1和 PE2之间的端到端数据路径， 即<MAC-P31 , MAC-P11 , B-VLAN1>≠< B-MAC2 , B-MAC1 , B-VLAN1>, 也就是说段 保护的检测路径与端到端保护的检测路径不吻合， 由于检测路径不吻合， 因此， 在以局部保护取代全路径保护实现对端到端工作隧道保护的情况下， 对端到端工作隧道进行局部保护检测时， 无法保证检测的可靠性， 检测的 精度和检测的效率也不高。 目前， 针对这两方面问题， 尚没有有效的解决 方案。 发明内容
有鉴于此，本发明的主要目的在于提供一种基于 MAC地址和终结条件 实现检测的方法及系统，基于隧道实例端点的 MAC地址和终结条件， 实现 对隧道实例相对应的段进行连通性检测， 能保证检测的可靠性， 检测的精 度高、 检测的效率快。
一种基于媒体接入控制地址和终结条件实现检测的方法， 该方法包括： 根据隧道实例端点的媒体接入控制 （MAC )地址和终结条件， 对隧道实例 相对应的段进行连通性检测；
其中， 隧道实例相对应的段分为工作段和备份段； 所述隧道实例端点 的 MAC 地址作为所述工作段的段检测报文或所述备份段的段检测报文的 目的 MAC地址；
所述终结条件具体为： 配置段检测端点所属维护域等级小于隧道实例 端点所属维护域等级， 通过维护域等级的配置方式来实现段检测报文的终 结。
其中， 所述工作段与所述备份段相对应， 一个工作段和至少一个备份 段构成段保护组（SPG ); 所述隧道实例具体为 SPG所属隧道实例；
对所述隧道实例对应的段的连通性进行检测之前还包括： 封装所述工 作段的段检测报文或所述备份段的段检测报文， 且釆用相同的封装方式； 所述封装具体为：将 SPG所属隧道实例所承载的虚拟局域网标识（ B-VLAN ) 和 SPG所属隧道实例端点的 MAC地址 ( B-MAC ),封装到连通性检查消息 报文中， 所述 B-MAC作为所述连通性检查消息报文的目的 MAC地址。 其中， 所述封装后还包括： 发送所述工作段的段检测报文或所述备份 段的段检测报文；
发送所述工作段的段检测报文时， 根据所述连通性检查消息报文的所 述 B-VLAN和所述 B-MAC, 在预先设置的转发地址数据库（ FDB )表中查 询对应的 FDB转发条目， 根据所述 FDB转发条目中 SPG所属隧道实例的 隧道预置路径发送连通性检查消息报文；
发送所述备份段的段检测报文时， 向预置的 SPG的备份出接口发送连 通性检查消息报文。
其中 , 所述检测包括对所述工作段的段检测报文或所述备份段的段检 测报文的连通性检测， 且釆用相同的检测方式； 所述连通性检测具体为： 在工作段或备份段上， 当前段检测端点接收到所述连通性检查消息报 文， 当判断出连通性检查消息报文的目的 MAC 地址与当前接收端点的 MAC地址不同时， 检测连通性检查消息报文中维护域等级， 如果维护域等 级与当前段检测端点上配置的维护域等级相同， 则检测出连通性检查消息 报文为段检测报文， 并实现对 SPG所属隧道实例局部保护的检测， 否则， 结束当前检测。
一种基于媒体接入控制地址和终结条件实现检测的系统， 该系统包括： 检测单元， 用于根据隧道实例端点的 MAC地址和终结条件，对隧道实例相 对应的段进行连通性检测；
其中， 隧道实例相对应的段分为工作段和备份段； 所述隧道实例端点 的 MAC 地址作为所述工作段的段检测报文或所述备份段的段检测报文的 目的 MAC地址；
所述终结条件具体为： 配置段检测端点所属维护域等级小于隧道实例 端点所属维护域等级， 通过维护域等级的配置方式来实现段检测报文的终 结。 其中， 该系统还包括： 封装单元， 用于封装所述工作段的段检测报文 或所述备份段的段检测报文， 并将 B-VLAN和 B-MAC封装到连通性检查 消息报文中，所述 B-MAC作为所述连通性检查消息报文的目的 MAC地址。
其中， 该系统还包括： 发送单元， 用于发送所述工作段的段检测报文 或所述备份段的段检测报文； 其中，
所述发送单元， 用于发送所述工作段的段检测报文， 并根据所述连通 性检查消息报文的所述 B-VLAN和所述 B-MAC, 在预先设置的 FDB表中 查询对应的 FDB转发条目， 根据所述 FDB转发条目中 SPG所属隧道实例 的隧道预置路径发送连通性检查消息报文；
所述发送单元， 用于发送所述备份段的段检测报文， 并向预置的 SPG 的备份出接口发送连通性检查消息报文。
本发明根据隧道实例端点的 MAC地址和终结条件，实现对隧道实例相 对应的段进行连通性检测， 该终结条件具体为： 配置段检测端点所属维护 域等级小于隧道实例端点所属维护域等级， 通过维护域等级的配置方式来 实现段检测报文的终结。
由于段检测报文的目的 MAC地址使用的是隧道实例端点的 MAC地 址， 因此， 段保护检测报文的检测路径与端到端隧道实例的转发路径吻合， 而且通过维护域等级的配置方式这种终结条件， 可以对与隧道实例相对应 的段的段检测报文进行终结处理， 并实现对隧道实例局部保护的检测。 从 而将隧道实例端点的 MAC地址和这种终结条件结合起来，在以局部保护取 代全路径保护实现对隧道实例的端到端工作隧道保护的情况下， 对端到端 工作隧道进行局部保护检测时， 釆用本发明， 能保证检测的可靠性， 检测 的精度高、 检测的效率快。
具体来说， 釆用本发明实现对隧道实例局部保护的检测， 包括工作段 故障检测和备份段可用性检测。 其中， 由于釆用隧道实例端点的 MAC地址 为段检测报文的目的 MAC地址， 因此， 工作段故障检测能够保证段检测报 文在被保护的隧道实例的隧道上进行传输， 即与端到端的工作隧道传输路 径一致。 备份段可用性检测能够确保备份段的可用性， 从而避免工作段出 现故障时切换到一个不可用的备份段上， 即盲目切换问题。 端到端的工作 隧道在局部保护下从工作段切换到备份段后， 不改变原隧道的属性。 同时， 本发明提出的检测方法未明显增加段检测端点所在设备的处理负担， 不影 响普通数据报文的转发性能。 附图说明
图 1为现有技术以太网隧道保护的示意图；
图 2为本发明方法检测时的一实现流程示意图；
图 3为本发明以太网隧道保护的示意图。 具体实施方式
本发明的基本思想是： 根据隧道实例端点的 MAC地址和终结条件， 实 现对隧道实例相对应的段进行连通性检测； 其中， 该终结条件具体为： 配 置段检测端点所属维护域等级小于隧道实例端点所属维护域等级 , 通过维 护域等级的配置方式来实现段检测报文的终结。
下面结合附图对技术方案的实施作进一步的详细描述。
一种基于 MAC地址和终结条件实现检测的方法，根据隧道实例端点的 媒体接入控制 MAC地址和终结条件，实现对隧道实例相对应的段进行连通 性检测。
具体来说， 隧道实例相对应的段分为工作段和备份段， 工作段和备份 段是对应的， 且工作段和备份段可以共同组成对应于该隧道实例的一个段 保护组（SPG ), SPG中包括一个工作段和多个备份段， SPG ^于端到端 工作隧道的中间节点之间创建的。隧道实例端点的 MAC地址作为工作段的 段检测报文或备份段的段检测报文的目的 MAC地址。 这样， 工作段的段检 测报文或备份段的段检测报文的目的 MAC地址，分别与所对应的隧道实例 端点的 MAC地址相同，使得段保护的检测报文转发路径与隧道实例端到端 转发路径吻合， 从而， 在以局部保护取代全路径保护实现对隧道实例的端 到端工作隧道保护的情况下能保证检测的可靠性。 就终结条件而言， 保证 了检测的可靠性后， 还要进一步达到提高检测精度和检测效率的目的， 工 作段的段检测报文或备份段的段检测报文根据隧道实例端点的 MAC 地址 传输时， 要能判断出当前检测报文的类型是段检测报文， 也就是说能区别 出现有的用于隧道端到端检测的检测报文和用于段检测的段检测报文它们 二者之间的不同， 此时需要终结条件来判断。 由于釆用终结条件能快速判 断出当前检测报文的类型是段检测报文， 并实现对隧道实例局部保护的检 测， 因此， 大大提高了检测的精度和检测的效率。
其中， 终结条件具体为： 通过维护域等级的配置方式来实现段检测报 文的终结， 该配置方式具体为： 配置工作段端点所属维护域等级与备份段 端点所属维护域等级相同。 这里， 段检测端点所属维护域等级小于所述隧 道实例端点所属维护域等级， 以此来实现维护域的包含关系。
就以上这种终结条件而言， 由一个工作段和多个备份段构成 SPG, 隧 道实例具体为 SPG所属隧道实例。 对隧道实例对应的段的连通性进行检测 之前还包括： 对段检测报文的处理， 具体为： 分别对工作段的段检测报文 或备份段的段检测报文进行封装， 封装工作段的段检测报文或备份段的段 检测报文釆用相同的封装方式。 封装方式的具体处理过程为： 将 SPG所属 隧道实例所 7 载的 B-VLAN 和 SPG 所属隧道实例端点的 MAC 地址 ( B-MAC ), 封装到 CCM报文中 , B-MAC作为 CCM报文的目的 MAC地 址。
封装后还包括： 发送工作段的段检测报文或备份段的段检测报文， 实 方式， 其具体处理过程分别为：
发送工作段的段检测报文时， 根据 CCM报文的 B-VLAN和 B-MAC , 在预先设置的转发地址数据库 （FDB )表中查询对应的 FDB转发条目， 根 据 FDB转发条目中 SPG所属隧道实例的隧道预置路径发送 CCM报文。
发送备份段的段检测报文时， 不查询 FDB表， 直接向预置的 SPG的备 份出接口发送 CCM报文。
发送后， 当对端段检测端点接收到 CCM报文，对 CCM报文进行检测， 检测包括对工作段的段检测报文或备份段的段检测报文的检测， 釆用相同 的检测方式， 其具体处理过程， 如图 2所示， 包括以下步骤：
步骤 101、 在 SPG所属隧道实例对应的工作段或备份段上， 当前段检 测端点接收到 CCM报文。
步骤 102、 当判断出 CCM才艮文的目的 MAC地址与当前接收端点的 MAC地址不同时检测维护域等级。
步骤 103、 检测 CCM报文中维护域等级， 如果维护域等级与当前段检 测端点上配置的维护域等级相同， 则执行步骤 104; 如果维护域等级与当前 段检测端点上配置的维护域等级不相同， 则执行步骤 105。
步骤 104、检测出 CCM报文为段检测报文， 实现对 SPG所属隧道实例 局部保护的检测。
步骤 105、 结束当前检测流程。
综上所述， 就釆用这种终结条件而言， 本发明通过对段检测报文的检 测， 能实现以太网隧道分段保护， 具体来说， 包括工作段故障检测和备份 段可用性检测两方面内容。 以下分别对工作段故障检测和备份段可用性检 测进行阐述。
其中， 工作段故障检测方法包括如下内容： 步骤 201、在一条以太网隧道的其中一段的两个节点上配置工作段的段 检测端点， 段检测端点与一个隧道实例相对应， 工作段的段检测端点属于 一个管理联合（MA )。
这里， 工作段上配置的维护域等级比端到端的隧道上配置维护域等级 低， 以此来实现维护域的包含关系。
步骤 202、一个本端的段检测端点沿隧道向另一个远端的段检测端点发 送检测报文， 检测报文的目的地址是隧道实例端点的 MAC地址。
这里， 检测 ^艮文才艮据该段所属隧道实例的 B-VLAN和 B-MAC查 FDB 表进行发送。
步骤 203、远端的段检测端点收到检测报文后，根据检测报文携带的信 息以及段检测端点配置表来确定是否是保护段的对端发送的段检测报文。 如果是保护段的段检测报文， 则进行段保护的相应处理， 否则进行进一步 的判断以决定丟弃或转发。
这里， 举例来说， 满足如下三个条件的检测报文可以为一个段检测报 文：
一、 检测报文的目的 MAC地址是隧道实例端点的 MAC地址；
二、 检测报文的维护域等级与当前段检测端点上配置的维护域等级相 同；
三、 该段检测端点配置表中能够匹配到发送端点的其他信息。
步骤 204、 本端和远端这两端的段检测端点重复执行步骤 201 至步骤 203 , 定期发送检测报文， 远端一定周期内没有收到对端发送的检测报文即 可判定保护段发生故障。
其中， 备份段可用性检测包括如下内容：
步骤 301、在一条以太网隧道的工作段对应的备份段的两个节点上配置 备份段检测端点， 备份段与工作段所属的隧道实例相对应， 备份段的段检 测端点属于一个 MA。
这里， 备份段上配置的维护域等级与工作段的一致， 同样比端到端的 隧道上配置维护域等级低， 以此来实现维护域的包含关系。
步骤 302、一个本端的段检测端点沿隧道向另一个远端的段检测端点发 送检测报文， 检测报文的目的地址是隧道实例端点的 MAC地址。
这里， 检测报文根据该段所属隧道实例的 B-VLAN和备份段检测端点 所属接口直接发送， 不查 FDB表。
步骤 303、远端的段检测端点收到检测报文后，根据检测报文携带的信 息以及段检测端点配置表来确定是否是备份段的对端发送的段检测报文。 如果是备份段的段检测报文， 则进行段保护的相应处理， 否则进行进一步 的判断以决定丟弃或转发。
这里， 举例来说， 满足如下三个条件的检测报文可以为一个段检测报 文：
一、 检测报文的目的 MAC地址是隧道实例端点的 MAC地址； 二、 检测报文的维护域等级与当前段检测端点上配置的维护域等级相 同；
三、 该段检测端点配置表中能够匹配到发送端点的其他信息。
步骤 304、 本端和远端这两端的段检测端点重复执行步骤 301 至步骤 303 , 定期发送检测报文， 远端一定周期内能够收到对端发送的检测报文即 可判定备份段正常， 从而工作段发生故障时可以切换到备份段。
需要指出的是， 以上本发明涉及的 B-VLAN在隧道的两个方向上的具 体标识值可以相同， 也可以不同。
一种基于 MAC地址和终结条件实现检测的系统， 该系统包括： 检测单 元， 用于 居隧道实例端点的 MAC地址和终结条件， 实现对隧道实例相对 应的段进行连通性检测。 其中， 隧道实例相对应的段分为工作段和备份段； 隧道实例端点的 MAC 地址作为工作段的段检测报文或备份段的段检测报 文的目的 MAC地址。终结条件具体为： 配置段检测端点所属维护域等级小 于隧道实例端点所属维护域等级， 通过维护域等级的配置方式来实现段检 测"¾文的终结。
这里， 该系统还包括： 封装单元， 用于封装工作段的段检测报文或备 份段的段检测报文，并将 SPG所属隧道实例所承载的 B-VLAN和 B-MAC, 封装到连通性检查消息报文中， B-MAC 作为连通性检查消息报文的目的 MAC地址。
这里， 该系统还包括： 发送单元， 用于发送工作段的段检测报文或备 份段的段检测报文。 其中， 发送单元， 用于发送工作段的段检测报文， 并 根据连通性检查消息报文的 B-VLAN和 B-MAC , 在预先设置的 FDB表中 查询对应的 FDB转发条目， 根据 FDB转发条目中 SPG所属隧道实例的隧 道预置路径发送连通性检查消息报文。 发送单元， 用于发送备份段的段检 测报文， 并向预置的 SPG的备份出接口发送连通性检查消息报文。
方法实施例为： 釆用以上这种终结条件的情况。
如图 1所示， PE1-P11-P21-P31-PE2为一流量工程服务实例的端到端工 作隧道， PE1和 PE2为该隧道实例的端点； PE1-P51-P61-PE2为该流量工程 服务实例的端到端备份隧道， 当该流量工程服务实例的端到端工作隧道发 生检测到故障时， 可以将整个服务实例切换到备份隧道上。 假设工作隧道 的故障在 P11-P21-P31这一段路径之间发生的概率特别大，或者由于其他原 因需要重点保护这一段路径，可以釆用局部段保护， 即对 P11-P21-P31之间 的部分进行保护。
P11-P21-P31段为 PE1到 PE2端到端隧道的一部分， 本发明在 P11和 P31 之间发送检测报文分别监控工作段 P11-P21-P31 的故障和备份段 P11-P41-P31的可用性。 B-VLAN1为 PE1到 PE2端到端隧道所在的 VLAN。 Pl l与 P31之间工作段的检测报文和备份段的检测报文所承载的 VLAN与 隧道的 VLAN相同， 均为 B- VLAN 1。 隧道两个方向上 B- VLAN的具体标 识值可以不同。 以 P11发给 P31的检测报文为例， 检测报文的目的地址为 端到端隧道的终点 PE2的 MAC地址， 同理， P31发给 P11的检测报文的 目的地址为端到端隧道的终点 PE1 的 MAC地址。 以此保证段检测报文承 载路径与端到端隧道的承载路径相同。
以图 3所示， 以 IEEE 802. lag CFM协议为例， PE3-P12-P22-P32-PE4 为一流量工程 Λ良务实例的端到端工作隧道， PE3和 PE4为该隧道实例的端 点； P12-P42-P32和 P12-P22-P32组成一个 SPG, —个 SPG至少包含两个 MA, 图 3中包括两个 MA, 分别以第一 MA71和第二 MA72表示。
就工作段 P12-P22-P32而言，先在工作段上配置维护域，其配置方式为： 维护域等级比隧道上的维护域等级低；然后在工作段的两个端点 P12和 P32 上配置逻辑管理节点， 以区别于物理上的节点 P12和 P32, 其中， 如图 3 所示，在 P12上配置 MEP711 ,在 P32上配置 MEP712,且 MEP711和 MEP712 属于第一 MA71 , MEP711和 MEP712与端到端隧道的配置信息关联， 该端 到端隧道的配置信息包括 B-DA、 B-VLAN以及对应的 FDB表条目等。 就 备份段 P12-P42-P32而言， 先在备份段上配置维护域， 其配置方式为： 维护 域等级比隧道上的维护域等级低； 然后在备份段的两个端点 P12和 P32上 配置逻辑管理节点，以区别于物理上的节点 P12和 P32。其中，如图 3所示， 在 P 12上配置 MEP721 , 在 P32上配置 MEP722, 且 MEP721和 MEP722 属于第二 MA72。 MEP721和 MEP722与端到端隧道的配置信息关联， 该端 到端隧道的配置信息包括 B-DA、 B-VLAN以及备份段对应的出接口等。
基于以上的配置， 以 CCM报文作为 SPG的检测报文时， 封装工作段 和备份段的段检测报文所釆用的封装方式一样， 包括以下步骤：
步骤 401、 为 CCM 文二层头封装 SPG所属隧道实例的 B-VLAN和 B-MAC。
这里， 这样配置后 CCM报文沿被保护的隧道进行传输，保证了段检测 与隧道完全一致。
步骤 402、 为 CCM报文填充其它必要信息， 如维护联合标识（MAID , Maintenance Association Identifier )、维护联合端点标识 ( MEPID , Maintenance association End Point Identifier )等， 与国际标准保持一致。
向工作段和向备份段发送段检测报文所釆用的发送方式一样， 具体为： 在工作段与备份段上分别发送一份 CCM报文。 其中， 工作段上以该 CCM 报文的 B-VLAN和 B-MAC查 FDB表， 根据隧道预置路径发送该 CCM报 文； 备份段上直接向 SPG的备份出接口发送该 CCM报文， SPG的备份出 接口是预先配置的。
MEP在收到一个 CCM报文时检测该 CCM报文为一个段检测报文的处 理， 其包括以下步骤：
步骤 501、 判断 CCM报文的目的 MAC地址与收包端点的 MAC地址 是否相同， 如果相同， 则不是段检测报文， 转而进行其他处理； 如果不相 同， 转入步骤 502。
步骤 502、 用 CCM报文中的 MEL字段中封装的维护域等级， 来区分 是段上的 CCM报文还是隧道上的 CCM报文，比较 CCM报文通用头中 MEL 字段是否等于本端点所配置的维护域等级， 如果不相同， 则转而进行其他 处理； 如果相同， 则转入步骤 503。
步骤 503、 验证 CCM报文内的其他信息与国际标准保持一致。
步骤 504、 确认该 CCM报文为段检测报文并做相应处理， 对于工作段 是实现工作段的故障检测， 并实现段保护处理； 对于备份段是实现备份段 的可用性检测， 并实现段保护处理。
以上所述仅为本发明的较佳实施例而已， 并非限定本发明的保护范围。

Claims

权利要求书
1、 一种基于媒体接入控制地址和终结条件实现检测的方法， 其特征在 于， 该方法包括： 根据隧道实例端点的媒体接入控制 （MAC )地址和终结 条件， 对隧道实例相对应的段进行连通性检测；
其中， 隧道实例相对应的段分为工作段和备份段； 所述隧道实例端点 的 MAC地址作为所述工作段的段检测报文、或所述备份段的段检测报文的 目的 MAC地址；
所述终结条件具体为： 配置段检测端点所属维护域等级小于隧道实例 端点所属维护域等级， 通过维护域等级的配置方式来实现段检测报文的终 结。
2、 根据权利要求 1所述的方法， 其特征在于， 所述工作段与所述备份 段相对应， 一个工作段和至少一个备份段构成段保护组（SPG ); 所述隧道 实例具体为 SPG所属隧道实例；
对所述隧道实例对应的段的连通性进行检测之前还包括： 封装所述工 作段的段检测报文、 或所述备份段的段检测报文， 且釆用相同的封装方式； 所述封装具体为： 将 SPG 所属隧道实例所承载的虚拟局域网标识 ( B-VLAN )和 SPG所属隧道实例端点的 MAC地址（ B-MAC ), 封装到连 通性检查消息报文中， 所述 B-MAC作为所述连通性检查消息报文的目的 MAC地址。
3、 根据权利要求 2所述的方法， 其特征在于， 所述封装后还包括： 发 送所述工作段的段检测报文、 或所述备份段的段检测报文；
发送所述工作段的段检测报文时， 根据所述连通性检查消息报文的所 述 B-VLAN和所述 B-MAC, 在预先设置的转发地址数据库（ FDB )表中查 询对应的 FDB转发条目， 根据所述 FDB转发条目中 SPG所属隧道实例的 隧道预置路径发送连通性检查消息报文； 发送所述备份段的段检测报文时， 向预置的 SPG的备份出接口发送连 通性检查消息报文。
4、 根据权利要求 2或 3所述的方法， 其特征在于， 所述检测包括对所 述工作段的段检测报文、 或所述备份段的段检测报文的连通性检测， 且釆 用相同的检测方式；
所述连通性检测具体为： 在工作段或备份段上， 当前段检测端点接收 到所述连通性检查消息报文，当判断出连通性检查消息报文的目的 MAC地 址与当前接收端点的 MAC地址不同时，检测连通性检查消息报文中维护域 等级， 如果维护域等级与当前段检测端点上配置的维护域等级相同， 则检 测出连通性检查消息报文为段检测报文， 并实现对 SPG所属隧道实例局部 保护的检测， 否则， 结束当前检测。
5、 一种基于媒体接入控制地址和终结条件实现检测的系统， 其特征在 于， 该系统包括： 检测单元， 用于根据隧道实例端点的 MAC地址和终结条 件， 对隧道实例相对应的段进行连通性检测；
其中， 隧道实例相对应的段分为工作段和备份段； 所述隧道实例端点 的 MAC地址作为所述工作段的段检测报文、或所述备份段的段检测报文的 目的 MAC地址；
所述终结条件具体为： 配置段检测端点所属维护域等级小于隧道实例 端点所属维护域等级， 通过维护域等级的配置方式来实现段检测报文的终 结。
6、 根据权利要求 5所述的系统， 其特征在于， 该系统还包括： 封装单 元， 用于封装所述工作段的段检测报文、 或所述备份段的段检测报文， 并 将 B-VLAN和 B-MAC封装到连通性检查消息^艮文中 ,所述 B-MAC作为所 述连通性检查消息报文的目的 MAC地址。
7、 根据权利要求 6所述的系统， 其特征在于， 该系统还包括： 发送单 所述发送单元， 用于发送所述工作段的段检测报文， 并根据所述连通 性检查消息报文的所述 B-VLAN和所述 B-MAC, 在预先设置的 FDB表中 查询对应的 FDB转发条目， 根据所述 FDB转发条目中 SPG所属隧道实例 的隧道预置路径发送连通性检查消息报文；
所述发送单元， 用于发送所述备份段的段检测报文， 并向预置的 SPG 的备份出接口发送连通性检查消息报文。
PCT/CN2010/071479 2009-04-02 2010-03-31 基于媒体接入控制地址和终结条件实现检测的方法及系统 WO2010111957A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200910081113.8 2009-04-02
CN2009100811138A CN101854266B (zh) 2009-04-02 2009-04-02 基于媒体接入控制地址和终结条件实现检测的方法及系统

Publications (1)

Publication Number Publication Date
WO2010111957A1 true WO2010111957A1 (zh) 2010-10-07

Family

ID=42805544

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2010/071479 WO2010111957A1 (zh) 2009-04-02 2010-03-31 基于媒体接入控制地址和终结条件实现检测的方法及系统

Country Status (2)

Country Link
CN (1) CN101854266B (zh)
WO (1) WO2010111957A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107835126B (zh) * 2017-10-19 2021-08-24 苏州盛科通信股份有限公司 一种报文转发方法及系统

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1921440A (zh) * 2006-09-15 2007-02-28 华为数字技术有限公司 检测路径最大传输单元的方法和系统
CN101197648A (zh) * 2008-01-02 2008-06-11 中兴通讯股份有限公司 用于接入网的自环路检测方法和装置

Family Cites Families (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050099951A1 (en) * 2003-11-10 2005-05-12 Nortel Networks Limited Ethernet OAM fault detection and verification
CN101039267A (zh) * 2007-04-06 2007-09-19 华为技术有限公司 基于ip的虚拟链路管理的方法及装置
CN101106486B (zh) * 2007-08-13 2010-07-21 杭州华三通信技术有限公司 虚链路故障的检测处理方法及组件

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1921440A (zh) * 2006-09-15 2007-02-28 华为数字技术有限公司 检测路径最大传输单元的方法和系统
CN101197648A (zh) * 2008-01-02 2008-06-11 中兴通讯股份有限公司 用于接入网的自环路检测方法和装置

Also Published As

Publication number Publication date
CN101854266B (zh) 2013-12-04
CN101854266A (zh) 2010-10-06

Similar Documents

Publication Publication Date Title
WO2019105066A1 (zh) 处理路由的方法和装置、以及数据传输的方法和装置
CN101931520B (zh) 一种切换方法及系统
JP5385154B2 (ja) Ｅｔｈｅｒｎｅｔ及びＭＰＬＳネットワークを相互接続する方法及び装置
US8982710B2 (en) Ethernet operation and maintenance (OAM) with flexible forwarding
US8018841B2 (en) Interworking an ethernet ring network and an ethernet network with traffic engineered trunks
CN101364926B (zh) 一种网络保护的方法和设备
WO2008119300A1 (fr) Procédé et dispositif de protection pour service d&#39;arborescence ethernet
WO2009036705A1 (fr) Procédé de détection de panne d&#39;interface et équipement de nœud de réseau
WO2011022910A1 (zh) 一种以太网路径保护的切换方法及系统
WO2011147373A1 (zh) 链路聚合故障保护方法、设备和系统
CN102282805B (zh) 一种业务保护方法及接入设备
WO2009092241A1 (zh) 基于环路的报文传送方法、网络系统和节点设备
EP3522454B1 (en) Connectivity fault management in a communication network
JP5521035B2 (ja) イーサネットの一部のセグメント保護の共同検出方法及びシステム
US9893929B2 (en) Protection switching method and system for a multi-rooted point-to-multi-point service in a provider backbone bridge (PBB) network
WO2012092779A1 (zh) 一种pbbh-vpls网络中的业务保护方法
US8738960B2 (en) Local protection method of ethernet tunnel and sharing node of work sections of protection domain
US20130003532A1 (en) Protection switching method and system
WO2011011934A1 (zh) 一种以太网隧道分段保护方法和装置
WO2007104201A1 (fr) Procédé d&#39;acheminement de messages dans un tunnel de services
WO2011017892A1 (zh) 一种对通信流量实现负载分担的方法和装置
WO2010111957A1 (zh) 基于媒体接入控制地址和终结条件实现检测的方法及系统
CN101854265B (zh) 一种以太网隧道局部保护的检测方法及系统
WO2011020339A1 (zh) 一种分段保护中的切换方法及系统
WO2011029249A1 (zh) 以太网隧道的保护方法与装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 10758059

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 10758059

Country of ref document: EP

Kind code of ref document: A1