WO2010127533A1

WO2010127533A1 - Network protection method and network protection framework

Info

Publication number: WO2010127533A1
Application number: PCT/CN2009/074592
Authority: WO
Inventors: 吴少勇; 魏月华
Original assignee: 中兴通讯股份有限公司
Priority date: 2009-05-05
Filing date: 2009-10-23
Publication date: 2010-11-11
Also published as: CN101883040B; CN101883040A

Abstract

A network protection method and a network protection framework are provided by this invention. In the network based on the Provider Backbone Bridge Traffic Engineering (PBB-TE), a local network is determined, and a work segment and a protect segment are set in the determined local network. When the work segment path fails, the traffic on this work segment path is switched to its protect segment path, rather than the switching of the whole path. Therefore, the speed of the failure recovery is improved, and the nodes concerned with the protection switching are reduced.

Description

TECHNICAL FIELD The present invention relates to the field of network protection, and more particularly to a network based on carrier-grade Ethernet technology, that is, a provider of traffic engineering, PBB-TE (Provider Backbone Bridge Traffic Engineering) Protection methods and network protection architecture. BACKGROUND OF THE INVENTION Ethernet technology has been widely used in local area networks due to its simplicity, high efficiency, and low cost, and is rapidly moving from LAN-based networking technologies to enterprise networks, metropolitan area telecommunications networks, and wide areas. Telecom network and other large-scale networking technologies have developed. Therefore, carrier-class Ethernet technology has emerged. The Institute of Electrical and Electronics Engineers (IEEE) proposed the carrier-grade Ethernet technology, PBB-TE, and the corresponding standard is IEEE 802.1Qay. PBB-TE, also known as Provider Backbone Transport (abbreviated as ΡΒΤ) technology, is a connection-oriented Ethernet technology in which all traffic is forwarded according to the address table. PBB-TE technology is based on the technology of PBB (Provider Backbone Bridge, corresponding to IEEE 802. lah) technology. Its core is the improvement of PBB technology. Through network management and control, Ethernet is enabled. The service is connected to implement the functions of the telecommunication network such as the protection, operation, administration, and management (OAM), the quality of service (QoS), and the traffic engineering. The PBB-TE technology uses the outer media access control (MAC) and the virtual local area network (VLAN), which is the MAC address (B-DA) of the bone network. B-VID is used for service forwarding, and its forwarding path is pre-configured. PBB-TE technology is compatible with the traditional Ethernet bridge architecture. It can forward data frames based on BD A and B-VID without updating the network intermediate nodes. The data frames do not need to be modified, and the forwarding efficiency is high. In order to improve the reliability of the network, an end-to-end protection mechanism is adopted in the PBB-TE-based network, that is, there are two tunnel entities between the end-to-end, which are working entities and protection entities, and adopt IEEE 802. lag The Connectivity Fault Management (CFM) mechanism continuously performs state detection on the working entity and the protection entity respectively. When the working entity fails, Automatically transferring services to pre-established protection entities, this end-to-end protection mechanism adds the necessary resiliency to the PBB-TE network. FIG. 1 is a schematic structural diagram of an end-to-end protection mechanism in a PBB-TE based network according to the prior art. As shown in FIG. 1 , in a PBB-TE network, PE1 and PE2 are both ends of a working entity and a protection entity. The path of the working entity is PE1-P1-P2-P3-PE2, and the path of the protection entity is PE1-P4-P5-PE2. The working entity and the protection entity are pre-configured with their own VLANs. When traffic enters the PBB-TE network, the end node (such as node PE1 in Fig. 1, also called edge node) encapsulates the frame into a PBB-TE network based on information such as the ingress port and VLAN of the frame in the traffic. Frame format, that is, encapsulating a layer header on the original data frame header. In the newly encapsulated frame header, the source MAC address in the B-MAC is the MAC address of the ingress node, that is, the MAC address of the PE1, and the destination MAC address is the MAC address of the egress node, that is, the PE2. In addition, the new frame header also encapsulates information such as a service VLAN tag (I-tag) and a B-VID, where the B-VID is a pre-set VLAN of the working entity or protection entity that selects the transmission. When both the working entity and the protection entity are in a normal state, PE1 encapsulates the B-VID of the frame in the traffic as the VLAN of the working entity, and the traffic is transmitted from the working entity. The transmission path is PE1-P1-P2-P3-PE2, such as Figure 1 shows. When the working entity fails, PE1 encapsulates the B-VID of the frame in the traffic as the VLAN of the protection entity, and the traffic is switched to the protection entity. The transmission path is PE1-P4-P5-PE2, as shown in Figure 2. 2 is a schematic diagram of traffic flow after the protection switching of the PBB-TE based network in the prior art. When the traffic is transmitted to another end node of the PBB-TE network (such as node PE2 in Fig. 1, also called edge node), the egress node restores the frame in the PBB-TE network to the normal data frame format and outputs it. In the current end-to-end protection mechanism structure, end-to-end protection can only perform full path protection, so the path to the working entity and the protection entity is long, and the probability of simultaneous failure of the working entity and the protection entity is greater. If the working entity and the protection entity fail at the same time, the end-to-end traffic will be lost. If a segment of the working entity or the protected entity is particularly vulnerable or a certain segment is particularly important, the failure of the segment will cause the full path to be switched, which is not conducive to network optimization. However, the end-to-end protection mechanism architecture of the existing PBB-TE based network can only reduce the speed of fault recovery because the full path protection can be performed, and the protection switching involves all nodes in the full path, which is not conducive to network optimization. It also reduces the reliability of end-to-end traffic. SUMMARY OF THE INVENTION In view of this, the main object of the present invention is to provide a network protection method, which can improve the speed of fault recovery, reduce the nodes for protection switching, facilitate network optimization, and ensure end-to-end traffic reliability. Another object of the present invention is to provide a network protection architecture that can improve the speed of fault recovery, reduce the nodes that protect switching, facilitate network optimization, and ensure end-to-end traffic reliability. In order to achieve the above object, the technical solution of the present invention is achieved as follows: According to an aspect of the present invention, a network protection method is first provided. According to the network protection method of the present invention, in the network based on the operator BQ-TE technology supporting traffic engineering, the method may specifically include the following steps: setting a working segment and a protection segment in the determined local network; Whether to transmit traffic through the working segment, if yes, the ingress node of the working segment encapsulates the received data frame into a transport format of the working segment, and transmits the encapsulated data frame through the working segment port; the outgoing node of the working segment will data The frame is restored to the frame information before entering the working node's ingress node and forwarded; the process ends; if not, the ingress node of the protection segment encapsulates the received data frame into a transport format of the protection segment, and transmits the packet through the protection segment port. The following data frame; the outbound node of the protection segment restores the data frame to the frame information before entering the ingress node of the protection segment and forwards it. Specifically, the local network is determined according to the actual situation of the network. Specifically, at least one end node of the working segment and the protection segment is the same end node. Specifically, the virtual local area network VLAN of the working segment forwarding traffic is different from the VLAN for the protection segment forwarding traffic. Further, the method for determining whether to transmit traffic through the working segment includes: performing state detection on the working segment and the protection segment, and when the detection result indicates that the working segment and the protection segment are both normal and there is no protection switching request, the protected traffic passes the work. Segment transmission; when the detection result shows that the working segment has failed, Or when there are other protection switching requests, the protected traffic is transmitted through the protection segment. Specifically, the state detection method is a connectivity fault management CFM mechanism. Specifically, the inbound node of the working segment encapsulates the received data frame into a working segment, and the transmission format specifically includes: replacing the bone network VLAN ID B-VID of the protected data frame received from the local network to work The VLAN of the segment replaces the source address in the data frame B-MAC address B-MAC with the node MAC address of the ingress node of the working segment, and the destination address is replaced with the node MAC address of the egress node of the working segment. Specifically, the transmission format of the protection node that encapsulates the received data frame into the protection segment may include: replacing the B-VID of the protected data frame received from outside the local network with the VLAN of the working segment, The source address in the data frame B-MAC is replaced with the node MAC address of the ingress node of the protection segment, and the destination address is replaced with the node MAC address of the outbound node of the protection segment. According to another aspect of the present invention, a network protection architecture is provided. According to the network protection architecture of the present invention, in the network based on the carrier bone bridge technology PBB-TE supporting traffic engineering, the determined local network is included, and the working segment and the protection segment are set in the determined local network. When the traffic is transmitted through the working segment, the ingress node of the working segment encapsulates the received data frame into a transport format of the working segment, and transmits the encapsulated data frame through the working segment port; the outgoing node of the working segment will receive the data frame Restore to the frame information before entering the working node's ingress node and forward it; when transmitting traffic through the protection segment, the ingress node of the protection segment encapsulates the received data frame into the transmission format of the protection segment, and transmits the package through the protection segment port. The following data frame; the outbound node of the protection segment restores the data frame to the frame information before entering the ingress node of the protection segment and forwards it. Specifically, at least one end node of the working segment and the protection segment is the same end node. Specifically, the VLAN in which the working segment forwards traffic is different from the VLAN in which the protection segment forwards traffic. It can be seen from the technical solution provided by the present invention that in the PBB-TE based network, the local network is determined, and the working segment and the protection segment are set in the determined local network. When the working segment path fails, only the traffic of the working segment path is switched to its protected segment path instead of The switch of the full path improves the speed of fault recovery and reduces the number of nodes involved in protection switching. The solution of the invention is beneficial to the optimization of the network and ensures the reliability of the end-to-end traffic. The local network refers to a part of the network in the protected network, which may be called a local area, and may also be referred to as a segment or a segment network, which is determined in advance according to the actual situation of the network, such as some particularly vulnerable or particularly important. The segment can be set to a local area. The protection of the local network in this paper may also be referred to as local area protection or area protection, and may also be referred to as segment protection or segmentation protection, and may have other similar names. Other features and advantages of the invention will be set forth in the description which follows, and The objectives and other advantages of the invention will be realized and attained by the <RTI The drawings are intended to provide a further understanding of the invention, and are intended to be a part of the description of the invention. In the drawings: FIG. 1 is a schematic structural diagram of an end-to-end protection mechanism in a PBB-TE based network according to the prior art; FIG. 2 is a schematic diagram of traffic flow after a PBB-TE based network protection switching is performed in the prior art; A flowchart of a method for implementing network protection according to the present invention; FIG. 4 is a schematic structural diagram of a local network protection mechanism in a PBB-TE based network according to the present invention; FIG. 5 is a schematic diagram of traffic flow after a PBB-TE based network protection switch is performed according to the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS In the embodiment of the present invention, a local network is determined in a PBB-TE based network, and a working segment and a protection segment are set in the determined local network. When the working segment path fails, only the traffic of the working segment path is switched to its protected segment path, which improves the speed of fault recovery and reduces the nodes involved in the protection switching. Thereby, the speed of failure recovery is increased, and the nodes involved in protection switching are reduced. In order to better understand the present invention, the network protection method and network protection architecture of the present invention will be described in detail below with reference to the accompanying drawings and specific embodiments. The preferred embodiments described herein are for illustrative purposes only and are not intended to limit the invention. The embodiments in the present application and the features in the embodiments may be combined with each other without conflict. According to an embodiment of the present invention, a network protection method is first provided. FIG. 3 is a flowchart of a method for implementing network protection according to an embodiment of the present invention. As shown in FIG. 3, in a PBB-TE-based network, the following may specifically include the following: Step (Step 300 - Step 305): Step 300: Set a working segment and a protection segment in the determined local network. A local network refers to a part of a network in a protected network. It can be called a local area. It can also be called a segment or a segment network. It is determined in advance according to the actual situation of the network. For example, some segments that are particularly vulnerable or particularly important can be Set to local area. The protection of the local network in this paper may also be referred to as local area protection or area protection, and may also be referred to as segment protection or segmentation protection, and may have other similar names. There are two end nodes at the end of the working segment and the protection segment respectively, and at least one coincidence of the working node and the end node of the protection segment is the same end node. A working segment port and a protection segment port are set on the ingress node, and a working segment port and a protection segment port are set on the outbound node. The address table of the traffic forwarding is preset in the node on the working segment and the protection segment. The VLAN for forwarding traffic for the working segment is different from the VLAN for forwarding the traffic for the protection segment. The specific setting method belongs to the technical means used by those skilled in the art, and details are not described herein again. This step emphasizes that in the PBB-TE-based network, the local network that needs to be protected is determined, and the working segment and the protection segment are set in the determined local network. The local network may be one or more, and the specific number is related to the situation in which protection is actually needed. Step 301: Determine whether the traffic is transmitted through the working segment. If yes, go to step 302, otherwise go to step 304. For the status detection of the working segment and the protection segment, the connection fault management mechanism in IEEE 802. lag can be used to continuously detect the status of the working segment and the protection segment separately, and obtain the detection results of the working segment and the protection segment. According to the detection result, it is determined that the protected traffic is transmitted on the working segment or the protection segment. When the detection result shows that the working segment and the protection segment are normal, and there is no protection switching request, the protected traffic is transmitted on the working segment; when the detection result indicates that the working segment has failed, or there are other protection switching requests, the protected traffic Transfer on the protection segment. It should be noted that the state detection for the working segment and the protection segment in this step belongs to the prior art, and existing methods other than the CFM mechanism may be used, and the scope of protection of the present invention is not limited. Step 302: The ingress node of the working segment encapsulates the received data frame into a transmission format of the working segment, and transmits the encapsulated data frame through the working segment port. When the data frame enters the ingress node of the working segment, the B-VID of the protected data frame received from outside the local network is replaced with the VLAN of the working segment, and the source address in the data frame B-MAC is replaced with the working segment. After the node MAC address of the ingress node is replaced with the node MAC address of the egress node of the working segment, the data frame is sent to the egress node of the working segment through the working segment port. Step 303: The egress node of the working segment restores the data frame to the frame information before entering the working node ingress node and forwards the frame information. End this process. When the outbound node of the working segment receives the data frame on the working segment, the B-MAC of the data frame is

The B-VID is reverted to the value before entering the working segment and then forwarded. Step 304: The ingress node of the protection segment encapsulates the received data frame into a transmission format of the protection segment, and transmits the encapsulated data frame through the protection segment port. When the data frame enters the ingress node of the protection segment, the B-VID of the protected data frame received from outside the local network is replaced with the VLAN of the working segment, and the source address in the data frame B-MAC is replaced with the protection segment. After the node MAC address of the ingress node is replaced with the node MAC address of the egress node of the protection segment, the data frame is sent to the egress node of the protection segment through the protection segment port. Step 305: The outbound node of the protection segment restores the data frame to the frame information before entering the ingress node of the protection segment and forwards the frame information. When the outbound node of the working segment receives the data frame on the working segment, the B-MAC of the data frame is

The B-VID is reverted to the value before entering the working segment and then forwarded. Corresponding to the method shown in FIG. 3, the embodiment of the present invention further provides a network protection architecture, where the network includes a determined office in a network based on the carrier BQ-TE supporting the traffic engineering. a network, and a working segment and a protection segment are set in the determined local network; when the traffic is transmitted through the working segment, the ingress node of the working segment encapsulates the received data frame into a transmission format of the working segment, and passes The working segment port transmits the encapsulated data frame; the outbound node of the working segment restores the data frame to the frame information before entering the working segment ingress node and forwards the packet; when the traffic is transmitted through the protection segment, the ingress node of the protection segment receives The received data frame is encapsulated into a transport format of the protection segment, and the encapsulated data frame is transmitted through the protection segment port; the outbound node of the protection segment restores the data frame to the frame information before entering the entry node of the protection segment and forwards the frame information. Wherein, at least one end node is the same end node in the end node of the working segment and the protection segment. Moreover, the VLAN in which the working segment forwards traffic is different from the VLAN in which the protection segment forwards traffic. The network protection method in the embodiment of the present invention is specifically described below in conjunction with an embodiment. 4 is a schematic structural diagram of a local network protection mechanism in a PBB-TE based network according to an embodiment of the present invention. As shown in FIG. 4, PE1-P1-P2-P3-PE2 is a traffic transmission entity of a PBB-TE based network. PE 1 and PE 2 are end nodes. It is assumed that P 1 -P2-P3 is the working segment of the local network protection in this embodiment, and P1-P4-P3 is the protection segment of the local network protection in the embodiment, and the working segment and the protection segment have the same end node P 1 and P3. When the data frame is transmitted from the PE 1 node to the PBB-TE technology-based network, the source address in the B-MAC of the data frame is the node MAC address of the PE 1, the destination address is the node MAC address of the PE2, and the B-VID is the Pre-configured VLAN on the traffic transport entity (where ^_ is set to VID1). When the detection result shows that the path on the working segment is normal, the data frame is at the ingress node of the working segment.

P1 is re-encapsulated, the source address in the B-MAC of the frame is replaced with the node MAC address of P1, the destination address is replaced with the node MAC address of P3, and the B-VID is replaced with the VLAN configured on the working segment. Set to VID2), where VID 1 and VID2 may be the same or different. After that, the encapsulated traffic is sent to the egress node of the working segment. After the data frame is transmitted to the egress node P3 of the working segment, the data frame is restored to the frame information before entering the local network, that is, the source address in the B-MAC of the data frame is restored to the MAC address of the node of the PE1, and the destination address is restored to the PE2. The node MAC address, B-VID is restored to VID 1 configured on the traffic transport entity. When the detection result indicates that the working segment has failed, or there are other protection switching requests, the protected traffic is switched to the protection segment for transmission. As shown in FIG. 5, FIG. 5 is a schematic diagram of traffic flow after network protection protection switching based on PBB-TE according to an embodiment of the present invention. The data frame is at the beginning of the protection segment The point PI is re-encapsulated, the source address in the B-MAC of the data frame is replaced with the node MAC address of P1, the destination address is replaced with the node MAC address of the outgoing node P3 of the protection segment, and the B-VID is replaced with protection. The pre-configured VLAN on the segment (assumed to be VID3). After that, the encapsulated traffic is sent to the egress node of the protection segment. After the data frame is transmitted to the egress node of the protection segment, the data frame is restored to the frame information before entering the local network, that is, the source address in the B-MAC of the data frame is restored to the MAC address of the node of the PE1, and the destination address is restored to the PE2. The node MAC address, B-VID is restored to the VID1 configured on the transport entity. In summary, the embodiment of the present invention determines a local network in a PBB-TE-based network, and sets a working segment and a protection segment in the determined local network. When the working segment path fails, only the traffic of the working segment path is switched to its protected segment path instead of the full path switching, which improves the speed of fault recovery and reduces the nodes involved in the protection switching. It should be understood that those skilled in the art can modify or change according to the description of the above scheme, for example, the method of demarcation using other user attributes, and all of these improvements and transformations belong to the present invention. The scope of protection of the claims. The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

A network protection method, characterized in that, in a network based on a carrier bone bridge technology PBB-TE supporting traffic engineering, the method comprises the following steps:

Setting a working segment and a protection segment in the determined local network;

Determine whether the traffic is transmitted through the working segment. If yes, the ingress node of the working segment encapsulates the received data frame into a transport format of the working segment, and transmits the encapsulated data frame through the working segment port; the outgoing node of the working segment will The data frame is restored to the frame information before entering the working node ingress node and forwarded; the process ends;

If not, the ingress node of the protection segment encapsulates the received data frame into a transmission format of the protection segment, and transmits the encapsulated data frame through the protection segment port; the outbound node of the protection segment restores the data frame to enter the protection segment. Frame information before the end node and forwarded.

2. The network protection method according to claim 1, wherein the local network is determined according to actual conditions of the network.

The network protection method according to claim 1, wherein at least one end node of the working segment and the protection segment is the same end node.

The network protection method according to claim 1, wherein the virtual local area network VLAN in which the working segment forwards traffic is different from the VLAN in which the protection segment forwards traffic.

The network protection method according to claim 1, wherein the method for determining whether to transmit traffic through the working segment comprises: performing state detection on the working segment and the protection segment, and displaying the working segment and the protection segment when the detection result is displayed When it is normal and there is no protection switching request, the protected traffic is transmitted through the working segment. When the detection result indicates that the working segment has failed, or there are other protection switching requests, the protected traffic is transmitted through the protection segment.

The network protection method according to claim 1, wherein the state detection method is a connectivity fault management CFM mechanism.

The network protection method according to claim 4, wherein the transmitting node of the working segment encapsulates the received data frame into a working segment specifically includes:

Replace the bone network VLAN ID B-VID of the protected data frame received from the local network with the VLAN of the working segment, and replace the source address of the data frame bone kilo MAC address B-MAC with the input end of the working segment. The node's MAC address, the destination address is replaced with the node's MAC address of the egress node of the working segment.

The network protection method according to claim 4, wherein the transmission format of the ingress node of the protection segment to encapsulate the received data frame into the protection segment comprises:

Replace the B-VID of the protected data frame received from the outside of the local network with the VLAN of the working segment, replace the source address in the data frame B-MAC with the node MAC address of the ingress node of the protection segment, and replace the destination address. The node MAC address of the egress node that protects the segment.

A network protection architecture, characterized in that, in a network based on a carrier bone bridge technology PBB-TE supporting traffic engineering, a determined local network is included, and a work is set in the determined local network. Segment and protection segment;

When the traffic is transmitted through the working segment, the ingress node of the working segment encapsulates the received data frame into a transport format of the working segment, and transmits the encapsulated data frame through the working segment port; the outgoing node of the working segment restores the data frame In order to enter the frame information before the entry node of the working segment and forward it;

When the traffic is transmitted through the protection segment, the ingress node of the protection segment encapsulates the received data frame into a transmission format of the protection segment, and transmits the encapsulated data frame through the protection segment port; the outbound node of the protection segment restores the data frame In order to enter the frame information before the protection segment entry node and forward it.

The network protection architecture according to claim 9, wherein at least one end node of the working segment and the protection segment is the same end node.

The network protection architecture according to claim 9, wherein the VLAN in which the working segment forwards traffic is different from the VLAN in which the protection segment forwards traffic.