WO2012149832A1

WO2012149832A1 - Method and device for establishing network example

Info

Publication number: WO2012149832A1
Application number: PCT/CN2012/070874
Authority: WO
Inventors: 文远癸
Original assignee: 华为技术有限公司
Priority date: 2011-08-25
Filing date: 2012-02-03
Publication date: 2012-11-08
Also published as: CN102255762A

Abstract

The embodiments of the present invention relate to a method and device for establishing a network example. The method includes: intercepting a protocol message of a user and acquiring user address information therein; sending the user address information to a configuration device to look up configuration information; receiving the network example configuration information corresponding to the user address information and sent by the configuration device; and establishing a network example according to the network example configuration information. In the method and device for establishing a network example in the embodiments of the present invention, the user address information is used to automatically look up the correlation so as to acquire the network example configuration information corresponding to the address information, so that a network example can be established automatically according to the network example configuration information, thus avoiding the costs of configuring the network example manually and effectively improving the efficiency of the network example configuration.

Description

The present invention claims the priority of the Chinese patent application filed on August 25, 2011 by the Chinese Patent Office, the application number is CN 201110246499.0, and the invention is entitled "Creating Method and Apparatus for Network Example". The content is incorporated herein by reference. Technical field

The present invention relates to the field of data communications, and in particular, to a method and apparatus for creating a network instance.

Background technique

Multi-Protocol Label Switching (MPLS) Layer 2 Virtual Private Network (L2VPN) can provide both IP services and Layer 2 VPN services on the same network, and can be set at any rate. Simple configuration. With this network technology, operators can manage and operate only one network, and can simultaneously provide IP services, Layer 3 virtual private networks (VPNs), Layer 2 VPNs, traffic engineering, differentiated services, etc. on one network. Many services, which reduce the operator's construction, maintenance and operating costs. The MPLS L2VPN service is especially suitable for enterprises that can manage their own network's routing structure and those that are not willing to expose enterprise network planning to operators.

MPLS L2VPN includes Virtual Private LAN Service (VPLS) and Virtual Leased Line (VLL). VPLS technology transparently delivers user Ethernet data over an MPLS network. From the user's point of view, the MPLS network using VPLS technology is a Layer 2 switching network through which Ethernet Layer 2 connections can be established between different user network instances.

The user first configures the VPLS network instance information on the router or switch, and then propagates the VPLS network instance information on multiple network devices (such as routers or switches) through the protocol. Therefore, the prior art must first configure the VPLS network instance information on the network device by the user, and then automatically discover the VPLS network instance information that the user has configured, and finally create a virtual circuit on multiple network devices through the protocol. It can be seen that the VPLS network instance information must be manually configured. When VPLS is deployed on a large scale (for example, 500 routers, there are 1 000 VPLS instances on each router), the user configuration workload is very large; After the device is connected to the VPLS network, you need to manually change the configuration when the location of the client device changes on the network. Summary of the invention

The embodiment of the invention relates to a method and a device for creating a network instance, so as to realize automatic creation of a network instance, save time and economic cost of configuration, and effectively improve efficiency.

An aspect of the present invention provides a method for creating a network instance, where the method includes: listening to a protocol packet of a user, acquiring user address information in the protocol packet; and sending the user address to the configuration device. Information to query configuration information;

Receiving a network instance configuration letter corresponding to the user address information sent by the configuration device:

Create a network instance according to the network instance configuration information.

An aspect of the present invention provides a method for creating a network instance, where the method includes: receiving user address information;

Querying a correspondence between the address information and network instance configuration information;

Obtaining the network instance configuration information required for configuring the network instance corresponding to the address information.

Send the network instance configuration information required to configure the network instance.

An aspect of the present invention provides a device for creating a network instance, where the device includes: an acquiring unit, configured to listen to a protocol packet of a user, and obtain user address information in the protocol packet;

a sending unit, configured to send the user address information to the configuration device to query configuration information, and a receiving unit, configured to receive network instance configuration information corresponding to the user address information sent by the configuration device;

An instance creation unit, configured to create a network instance according to the network instance configuration information. An aspect of the present invention provides a device for creating a network instance, where the device includes: a receiving unit, configured to receive user address information;

a query unit, configured to query a correspondence between the address information and the network instance configuration information, where the acquiring unit is configured to obtain network instance configuration information required for configuring the network instance corresponding to the address information;

And a sending unit, configured to send the network instance configuration information required for configuring the network instance. The network instance method and device are created by using the user address information to automatically obtain the network instance configuration information corresponding to the address information, thereby automatically creating a network instance according to the network instance configuration information, so the use of the network instance is eliminated. The cost of manually configuring a network instance effectively improves the efficiency of configuring a network instance. DRAWINGS

1 is a flowchart of a method for creating a network instance according to an embodiment of the present invention;

2 is a flowchart of a method for creating a network instance according to an embodiment of the present invention;

3 is a schematic diagram of an application environment of a method for creating a network instance according to an embodiment of the present invention; FIG. 4 is a flowchart of a method for creating a network instance according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of an interaction process of a method for creating a network instance according to an embodiment of the present invention; FIG. 6 is a schematic diagram of a PW establishment process of a method for creating a network instance according to an embodiment of the present invention; FIG. 7 is a network example according to an embodiment of the present invention; Schematic diagram of the creation device;

FIG. 8 is a schematic diagram of a device for creating a network instance according to an embodiment of the present invention. detailed description

The technical solution of the present invention will be further described in detail below through the accompanying drawings and embodiments. In the embodiment of the present invention, the manner of creating a network instance is changed from the manual manual configuration of the prior art to the automatic configuration, thereby enabling the network instance to be created quickly and conveniently.

FIG. 1 is a flowchart of a method for creating a network instance according to an embodiment of the present invention. As shown in the figure, a method for creating a network instance according to an embodiment of the present invention is, for example, a switch or The router specifically includes the following steps.

Step 101: Listen to the protocol packet of the user, and obtain the user address information in the protocol packet. The protocol packets to be intercepted include, but are not limited to, the Addres s Resolve Protocol (ARP) or the Dynamic Hosting Protocol (DHCP) packet, and the user address information that can be obtained. The user address information of the ARP packet includes, but is not limited to, a MAC address and an IP address. The address information of the DHCP packet includes the MAC address, the IP address, the host name, and the network domain name. The purpose of listening to the packet is to obtain the user. Address information, such as MAC address, IP address, MAC address plus IP address, host name, and so on.

Step 102: Send user address information to the configuration device to query configuration information.

The purpose of sending the MAC address information or the IP address information obtained in step 101 is to use the address information to query the configuration device for the corresponding network instance configuration information.

The network instance configuration information may also be referred to as site information, including various parameters, such as the name of the network instance, the encapsulation type, and/or the maximum encapsulation unit (MTU).

Step 103: Receive a network instance configuration letter corresponding to the user address information sent by the configuration device.

When the network instance configuration information is queried by using the MAC address information or the IP address information, the network instance configuration information is received, and the network instance configuration information is the network instance configuration information corresponding to the MAC address information or the IP address information.

Step 104: Create a network instance according to the network instance configuration information.

Creating a network instance creates a network instance based on the returned network instance configuration information on the creation principal, and sets various parameters of the network instance, such as encapsulation type and MTU.

Preferably, the steps 101-104 are performed by an access switch.

Preferably, as shown in FIG. 1, the embodiment of the present invention further includes a step 105, establishing a correspondence between the user address information and the network instance, and sending the correspondence to the forwarding engine.

The forwarding engine maintains the correspondence between the user address information and the network instance. When receiving the user data packet, the user obtains the user address information in the user packet, so that the corresponding relationship can be obtained to obtain the network instance corresponding to the user address information. And then send the user data packet to the corresponding Network instance.

The processing entity of the method for creating a network instance in this embodiment may be, but is not limited to, a router or a switch, and the network instance includes but is not limited to a VPLS instance, a virtual private line service (VPWS) instance, and a three-layer virtual private network. Network (Layer 3 Vi r tua l Pr ivate Network, L3VPN) instance. According to the network instance creation method of the embodiment, the network instance is created by using the automatically obtained network instance configuration information, thereby eliminating the cost of manually configuring the network instance, and effectively improving the efficiency of configuring the network instance.

2 is a flowchart of a method for creating a network instance according to an embodiment of the present invention. As shown in the figure, a method for creating a network instance according to an embodiment of the present invention is for setting a network instance configuration information body, for example, a deployment server, The embodiment specifically includes the following steps.

Step 201: Receive user address information.

The user address information is sent by the network instance creation entity, such as a switch or a server, and is obtained by listening to ARP packets or DHCP messages. The address information can be MAC address, IP address, MAC address plus IP address, host name, and so on.

Step 202: Query a correspondence between the address information and the network instance configuration information.

The correspondence relationship may be created in advance, that is, the correspondence between the network instance configuration information and the user address is configured in advance.

Step 203: Obtain the network instance configuration information required for configuring the network instance corresponding to the address information.

From the above correspondence, the network instance configuration information corresponding to the user address can be obtained. Step 204: Send network instance configuration information required for configuring a network instance.

The processing entity of the method for creating a network instance in this embodiment may be, but is not limited to, a deployment server, and the network instance includes but is not limited to a VPLS instance, a VPWS instance, and an L3VPN instance. According to the network instance creation method of the embodiment, the network device can automatically obtain the network instance configuration information, so as to automatically create a network instance, thereby eliminating the cost of manually configuring the network instance, and effectively configuring the network. The efficiency of the instance.

3 is a schematic diagram of an application environment of a method for creating a network instance according to an embodiment of the present invention. As shown in the figure, a host (HI and H2) 10 is provided. The host 10 has a network card 11, an automatic deployment server 20, and an access switch (SIA1). And SIA2) 31 and aggregation/core switch 32. Referring to FIG. 4, which is a flowchart of a method for creating a network instance according to an embodiment of the present invention, the network instance creation method in this embodiment specifically includes the following steps;

Step 301: Configure a network instance, such as a configuration information of a VPLS instance and user address information, such as a correspondence between a MAC address and an IP address, on the automatic deployment server.

The configuration of the correspondence can be manually configured, for example, manually configured by a network administrator. Step 302: Configure VPLS automatic deployment capability on the access switch.

The switch can query the configuration of the network instance required to create a VPLS instance. The configuration of this step can also be manually configured, for example, manually configured by the network administrator.

Step 311: The access switch, for example, the SIA1 listens to the ARP or DHCP packet sent by the NIC of the host HI, thereby obtaining the MAC address and/or the IP address information of the host in the packet.

Step 312: The access switch SIA1 sends the extracted MAC address and/or IP address information to the automatic deployment server.

Step 313: The automatic deployment server queries the correspondence according to the MAC address and the IP address, and obtains the configuration information of the VPLS network instance corresponding to the MAC address and the IP address.

Step 314: The automatic deployment server returns the VPLS network instance configuration information obtained by the query to the access switch SIA1.

Step 315: The access switch SW.A1 automatically creates a VPLS instance according to the received configuration information of the VPLS network instance.

Step 316: The access switch SW-A1 establishes a correspondence between the MAC address and the VPLS network instance and/or a correspondence between the IP address and the VPLS network instance, and sends the correspondence to the forwarding engine of the switch. In this way, the forwarding engine can forward the received user data packet according to the corresponding relationship.

Step 320: The access switch SW-A1 issues a VPLS to other switches, such as SIA2, through a protocol. Information, thereby creating a Pseudo Wire (PW) PW, also called a virtual circuit.

The same is true for other switches to automatically create VPLS instances. After the VPLS instances are created, the VPLS information can be advertised to each other. After the VPLS instance is sent, the access switch can receive the data packet sent by the NIC of the host, and then extract the MAC address and IP address information of the data packet, and then query the corresponding relationship according to the address information to obtain the corresponding VPLS instance, and send the VPLS instance to the VPLS instance. Data message.

Because for VPLS, there are several IETF standards: RFC 4761, RFC 4762, RFC 6074, draf t_xu_12vpn_vpls_isis_XX.

The VPLS using the RFC 4761 standard is called BGP VPLS. The RFC 4761 standard is a VPLS solution for establishing virtual circuits (ie, pseudowires) through the Border Gateway Protocol (BGP). In this solution, the BGP protocol implements automatic discovery and label distribution of the Provider Equipment (PE) device, and all the PEs of the edge routers participating in the VPLS service in the core network establish a full connection. The other PEs send the multi-protocol reachable/unreachable network layer information (MP_REACH/UNREACH_NLRI) packets containing the VPLS network instance information to perform parameter negotiation, and establish and remove virtual circuits between the VPLS network instances, so that each VPLS network instance can be connected. Together form the VPLS network.

The VPLS using the RFC 4762 standard is called LDP VPLS. The RFC 4762 standard defines a solution for implementing VPLS by establishing a virtual circuit through the Label Distribute Protocol (LDP). In this solution, the user manually specifies the PE device, and the LDP protocol implements the label distribution of the VPLS network instance. Each of the PEs of the edge routers participating in the VPLS service in the core network establishes a full connection between the PEs and the PEs. The VPLS network instance information (network instance ID, label) signaling packets are negotiated. The virtual circuit between the VPLS network instances is established and removed. The VPLS network instances can be connected together to form a VPLS network.

The VPLS using the RFC 6074 standard is called BGP-AD VPLS. The RFC 6074 standard defines a solution for automatically discovering (Auto Discovery, AD) VPLS network instance information through BGP. In this solution, the BGP protocol implements automatic discovery of PE devices. After discovering a VPL network instance information, the VPLS pseudowire is established through the RFC 4762 standard. The VPLS using the draft-xu-12vpn-vpls-isis-XX protocol is called IS-IS VPLS, and the draf t-xu-12vpn-vp 1 si s-XX protocol defines the intermediate system to the intermediate system. The Intermediate System (IS-IS) protocol establishes a virtual circuit to implement a VPLS solution. In this solution, the IS-IS protocol implements automatic discovery and label distribution of PE devices.

After the VPLS instance is created by using the network instance creation method of the embodiment of the present invention, the interaction of the VPLS members and the automatic deployment of the PW can be performed. The following takes BGP-AD VPLS as an example.

Referring to FIG. 5, a schematic diagram of an interaction process of a method for creating a network instance according to an embodiment of the present invention, as shown in the figure, a PE device (for example, PE1 and PE2) is a switch in the foregoing embodiment, such as an access switch and an aggregation/core switch. ,

After the VPLS network instance is automatically created on the PE, the VPLS-ID, the route identifier (RD, Route Distinguisher), the route target (RT, Route Target), and the VSI-ID parameters are added to the BGP Update message as BGP. The AD packet is then sent to the peer PE in all BGP domains.

The parameters encapsulated in the BGP Update message of PE1 are: VPLS-ID: 65535: 100, RD: 65535: 100, VSI-ID: 1.1.1.1, RT: 5: 5, next if mega ( Next Hop) : 1.1.1.1.

The parameters encapsulated in the BGP Update message of PE2 are: VPLS-ID: 65535: 100, RD: 65535: 100, VSI-ID: 2.2.2.2, RT: 5: 5, Next Hop: 2.2.2.2.

After receiving the Update packet sent by the remote end, the PE filters the received BGP AD packet according to the configured RT policy. For a BGP AD packet that meets the RT policy, the PE device obtains the information of the remote VSI from the packet and compares the remote information with the information generated by the local configuration.

If the VPLS-IDs of the VSIs of the two PEs are the same, for example, the number of the VSIs is 65535: 100, which means that the two VSIs belong to the same VPLS domain. Create a PW. If the VPLS-IDs of the VSIs of the two PEs are different, the PWs cannot be established because the two VSIs belong to different VPLS domains. After the VPLS member discovery is complete, the PW is established through LDP FEC 129 signaling negotiation. See the schematic diagram of the PW establishment process of the network instance creation method according to the embodiment of the present invention shown in FIG. 6, as shown in the figure, two PEs (PE1) The VSIs that belong to the same VPLS domain on the PE2) initiate LDP Mapping (FEC 129) signaling, which carries information such as AGI, SAII, TAII, and labels, according to the LDP session state of the remote end (Next Hop in BGP AD).

The message carried in the LDP mapping signaling of PE1 in the figure is: Next Hop: 1.1.1.1, Attachment Group Identifier (AGI): 65535: 100 (VPLS-ID), source attached to the personal identification (SAII, Source Attachment Individual Identifier ): 1.1.1.1 (VSI-ID), Target Attachment Individual Identifier (TAII): 2.2.2.2 (VSI-ID from BAG AD), Label (Label): 2001.

The message carried in the LDP mapping signaling of PE2 is Next Hop: 2.2.2.2, AGI: 65535: 100 (VPLS-ID), SAII: 2.2.2.2 (VSI-ID), TAII: 1.1.1.1 (VSI -ID from BAG AD), Label: 2001.

After receiving the remote LDP mapping, the PE obtains the VPLS-ID, PW type, MTU, and TAII information, and compares the information with the local VSI. If the negotiation succeeds and the conditions for establishing the PW are met, the PE creates a pair. End of the PW.

In another embodiment of the present invention, the access switch uses the address information obtained by the interception packet to query the automatic deployment server to obtain the network instance configuration information corresponding to the address information, and the switch uses the network instance. The configuration information can be used to create a VPLS instance. This eliminates the cost of manually configuring network instances and effectively improves the efficiency of configuring network instances. After the VPLS instance is created, the received data packet can be sent to the VPLS instance.

The foregoing embodiment is a method for creating a network instance. The following is a method for creating a network instance by using a network instance creation device. FIG. 7 is a schematic diagram of a device for creating a network instance according to an embodiment of the present invention. The network instance creation device of the example specifically includes: an obtaining unit 71, a sending unit 72, a receiving unit 73, and an instance creating unit 74.

The obtaining unit 71 is configured to listen to the protocol packet of the user, and obtain the user address information in the protocol packet. The sending unit 72 is configured to send the user address information to the configuration device to query the configuration. The receiving unit 73 is configured to receive the network instance configuration information corresponding to the user address information sent by the configuration device. The instance creating unit 74 is configured to create a network instance according to the network instance configuration information.

As shown in FIG. 7, the embodiment further includes a correspondence relationship establishing unit 75 and a forwarding unit 76, where the correspondence relationship establishing unit 75 is configured to establish a correspondence between the user address information and the network instance, and the corresponding relationship is performed. The relationship is sent to the forwarding engine; and the forwarding unit 76 is used by the forwarding engine to forward the data packet according to the correspondence.

Specifically, the acquiring unit 71 is configured to listen to the ARP packet or the DHCP packet, and the user address information may be a MAC address and/or an IP address, and the configuration information received by the receiving unit 73 may be a network corresponding to the user address information. The name of the instance, the encapsulation type, and/or the maximum encapsulation unit information may be, but not limited to, a router or a switch, and the network instance may be a VPLS instance, a VPWS instance, or an L3VPN instance. The network instance creation device of the embodiment can automatically obtain the network instance configuration information, automatically create a network instance according to the network instance configuration information, and eliminate the cost of manually configuring the network instance, thereby effectively improving the efficiency of configuring the network instance.

FIG. 8 is a schematic diagram of a device for creating a network instance according to an embodiment of the present invention. As shown in the figure, the network instance creation device in this embodiment specifically includes: a creating unit 80, a receiving unit 81, a query unit 82, an obtaining unit 83, and sending Unit 84.

The creating unit 80 is optional, and is used to create a correspondence between the user address information and the network instance configuration information. The receiving unit 81 is configured to receive the user address information, where the address information may be a MAC address sent by the network instance creation entity, such as a switch or a server. And the IP address; the query unit 82 is configured to query the correspondence between the address information and the network instance configuration information; the obtaining unit 83 is configured to obtain the network instance configuration information required for configuring the network instance corresponding to the address information; Used to send the network instance configuration information needed to configure a network instance.

The device for creating a network instance in this embodiment may be, but not limited to, a deployment server, and the network instance may be a VPLS instance, a VPWS instance, or an L3VPN instance. The device for creating a network instance in this embodiment uses the obtained address information to query the corresponding relationship to obtain the network instance configuration information corresponding to the address information, and sends the network instance configuration information to the device that needs to create the network instance, so that the device can automatically The network instance is created, which eliminates the cost of manually configuring the network instance and effectively improves the efficiency of configuring the network instance.

A person skilled in the art should further appreciate that the elements and algorithm steps of the various examples described in connection with the embodiments disclosed herein can be implemented in electronic hardware, computer software, or a combination of both, in order to clearly illustrate hardware and software. Interchangeability, the composition and steps of the various examples have been generally described in terms of function in the above description. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the solution. A person skilled in the art can use different methods for implementing the described functions for each particular application, but such implementation should not be considered to be beyond the scope of the present invention.

The steps of a method or algorithm described in connection with the embodiments disclosed herein can be implemented in hardware, a software module executed by a processor, or a combination of both. Software modules can be placed in random access memory

(RAM), memory, read only memory (ROM), electrically programmable ROM, electrically erasable programmable ROM, registers, hard disk, removable disk, CD-ROM, or any other form of storage known in the art. In the medium.

The above described embodiments of the present invention are further described in detail, and the embodiments of the present invention are intended to be illustrative only. The scope of the protection, any modifications, equivalents, improvements, etc., made within the spirit and scope of the invention are intended to be included within the scope of the invention.

Claims

Rights request

A method for creating a network instance, the method comprising:

Listening to the protocol packet of the user, obtaining the user address information in the protocol packet, and sending the user address information to the configuration device to query the configuration information;

The method for creating a network instance according to claim 1, wherein the intercepting the protocol packet of the user, and obtaining the user address information in the protocol packet includes: The device or the dynamic host configuration protocol DHCP packet is used to listen to the MAC address or IP address in the ARP or DHCP packet.

The method for creating a network instance according to claim 1 or 2, wherein the received network instance configuration information includes a name, a package type, and/or a maximum encapsulation unit of the network instance.

The method for creating a network instance according to claim 1, wherein the method further comprises: establishing a correspondence between the user address information and the network instance, and sending the corresponding relationship to the forwarding engine.

The method for creating a network instance according to claim 4, wherein the method further comprises: the forwarding engine forwarding the data packet according to the correspondence.

The method for creating a network instance according to claim 1, 2, 4 or 5, wherein the created network instance comprises a virtual private local area network service VPLS instance, a virtual private line service VPWS instance or a three-layer virtual private Network L3VPN instance.

A method for creating a network instance, the method comprising:

Receiving user address information;

Obtaining a network instance configuration letter required for configuring the network instance corresponding to the address information Send the network instance configuration information required to configure the network instance.

8. A device for creating a network instance, the device comprising:

An acquiring unit, configured to listen to a protocol packet of the user, and obtain user address information in the protocol packet;

An instance creation unit, configured to create a network instance according to the network instance configuration information.

The device for creating a network instance according to claim 8, wherein the acquiring unit is configured to listen to an address resolution protocol ARP packet or a dynamic host configuration protocol DHCP packet, and obtain the ARP or DHCP. MAC address or IP address in the message.

The device for creating a network instance according to claim 8 or 9, wherein the receiving unit is configured to receive a name, a package type, and a network instance corresponding to the user address information sent by the configuration device. / or the largest package unit.

The device for creating a network instance according to claim 8, wherein the device further includes a correspondence establishing unit, configured to establish a correspondence between the user address information and the network instance, and The correspondence is sent to the forwarding engine.

The apparatus for creating a network instance according to claim 11, wherein the apparatus further includes a forwarding unit, configured to forward, by the forwarding engine, a data packet according to the correspondence.

The device for creating a network instance according to claim 8, 9, or 1 or 12, wherein the network instance created by the instance creation unit includes a virtual private local area network service VPLS instance and a virtual private line service. VPWS instance or Layer 3 virtual private network L3VPN instance.

14. A device for creating a network instance, the device comprising:

a receiving unit, configured to receive user address information;

a query unit, configured to query a correspondence between the address information and the network instance configuration information, where the acquiring unit is configured to obtain a network required for configuring the network instance corresponding to the address information Network instance configuration information;

a sending unit, configured to send the network instance configuration information required for configuring the network instance ₍