WO2015039563A1 - 实现三层虚拟专用网的方法和设备 - Google Patents

实现三层虚拟专用网的方法和设备 Download PDF

Info

Publication number
WO2015039563A1
WO2015039563A1 PCT/CN2014/085896 CN2014085896W WO2015039563A1 WO 2015039563 A1 WO2015039563 A1 WO 2015039563A1 CN 2014085896 W CN2014085896 W CN 2014085896W WO 2015039563 A1 WO2015039563 A1 WO 2015039563A1
Authority
WO
WIPO (PCT)
Prior art keywords
address
terminal device
notification message
access notification
vpn
Prior art date
Application number
PCT/CN2014/085896
Other languages
English (en)
French (fr)
Inventor
徐小虎
张大成
Original Assignee
华为技术有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 华为技术有限公司 filed Critical 华为技术有限公司
Priority to EP14845726.0A priority Critical patent/EP3021529B1/en
Publication of WO2015039563A1 publication Critical patent/WO2015039563A1/zh
Priority to US15/078,422 priority patent/US10091106B2/en

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/74—Address processing for routing
    • H04L45/745—Address table lookup; Address filtering
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L45/00—Routing or path finding of packets in data switching networks
    • H04L45/02—Topology update or discovery
    • H04L45/04—Interdomain routing, e.g. hierarchical routing
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H04L12/4675—Dynamic sharing of VLAN information amongst network nodes
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L61/00—Network arrangements, protocols or services for addressing or naming
    • H04L61/50—Address allocation
    • H04L61/5007—Internet protocol [IP] addresses
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2101/00—Indexing scheme associated with group H04L61/00
    • H04L2101/60—Types of network addresses
    • H04L2101/618—Details of network addresses
    • H04L2101/622—Layer-2 addresses, e.g. medium access control [MAC] addresses

Definitions

  • the present invention relates to communication technologies, and in particular, to a method and device for implementing a three-layer virtual private network.
  • a service provider can provide a virtual private network (VPN) for a user by using an Internet protocol backbone (IP backbone).
  • IP backbone Internet protocol backbone
  • a Layer 3 Virtual Private Network allows hosts and routers to connect to each other based on Layer 3 addresses.
  • the L3VPN can be a Border Gateway Protocol (BGP) VPN or a Multi-Protocol Label Switching (MPLS) VPN.
  • BGP Border Gateway Protocol
  • MPLS Multi-Protocol Label Switching
  • the terminal device sends an Address Resolution Protocol (ARP) request to the Provider Edge (PE) device to which it is connected, and queries the media access control corresponding to the IP address of a remote terminal device in the same local area network. (Media Access Control, MAC) address.
  • ARP Address Resolution Protocol
  • PE Provider Edge
  • the PE that receives the ARP request returns the MAC address of the PE to the terminal device that sends the ARP request.
  • the PE broadcasts the host routing information corresponding to the local terminal device in the ARP table through BGP.
  • the terminal device may be at least one of a mobile phone, a personal computer (PC), an Internet Protocol Television (IPTV), a tablet computer, and the like.
  • a VPN site (VPN site, hereinafter referred to as a site) is a VPN user's location, and is connected to the SP network through a customer edge-Provider edge link (CE-PE link).
  • Site can access at least one VPN.
  • site1 and site2 access the same L3VPN.
  • the terminal device 1 in Site 2 accesses the terminal device 2 in site 2, the MAC address of the terminal device 2 is used as the destination MAC address.
  • the MAC address of the terminal device 2 is also stored in the ARP table of the terminal device 1.
  • the terminal device 1 accesses the terminal device 2, the MAC address of the terminal device 2 is still used as the destination MAC address of the packet, resulting in the terminal device 1 being unable to access the terminal device 2.
  • the embodiment of the invention provides a method and device for implementing L3VPN.
  • a network device is provided, where the network device is a first PE and is applied to an L3VPN.
  • the first site and the second site access the same L3VPN.
  • the first site accesses the L3VPN through the first PE.
  • the first PE includes a transmitting and receiving unit and a processing unit.
  • the sending and receiving unit is configured to receive an attach notification message sent by the first terminal device.
  • the access notification message carries the IP address of the first terminal device.
  • the access notification message is used to notify the first PE that the first terminal device accesses the first site.
  • the processing unit is configured to obtain an IP address of the second PE according to the virtual private network identifier (VPN ID) and the IP address of the first terminal device.
  • the second site accesses the L3VPN through the second PE.
  • the first terminal device accesses the second site before accessing the first site.
  • the VPN ID identifies a VPN associated with an interface that receives the access notification message.
  • the processing unit is further configured to obtain an IP address of the second terminal device according to the VPN ID and an IP address of the second PE.
  • the IP address of the second terminal device is different from the IP address of the first terminal device.
  • the second terminal device accesses the second site.
  • the sending and receiving unit is further configured to send a binding update notification message to the first terminal device.
  • the binding update notification message carries the MAC address of the first PE and the IP address of the second terminal device.
  • a first implementation comprising a first determining module and a second determining module.
  • the first determining module is configured to obtain an IP address of the second PE by querying the routing table according to the VPN ID and the IP address of the first terminal device.
  • the second determining module is configured to obtain an IP address of the second terminal device by querying the routing table according to the VPN ID and the IP address of the second PE.
  • a second implementation manner is provided, and the sending and receiving unit is further configured to receive a route revocation message sent by the second PE.
  • the route revocation message carries an IP address prefix, VPN information, and an IP address of the second PE.
  • the route revocation message is used to revoke the host route corresponding to the IP address prefix.
  • the VPN information is used to identify the VPN to which the host route belongs.
  • the processing unit includes: a third determining module, configured to determine whether an IP address of the first terminal device carried in the access notification message corresponds to an IP address prefix carried in the route revocation message, and whether the VPN ID corresponds to a VPN identified by the VPN information, When the IP address of the first terminal device carried in the access notification message corresponds to the IP address prefix carried in the route revocation message, and the VPN ID corresponds to the VPN identified by the VPN information, the IP of the second PE carried in the route revocation message is obtained. address. And a fourth determining module, configured to obtain an IP address of the second terminal device by querying a routing table according to the VPN ID and the obtained IP address of the second PE.
  • the network device further includes: a storage unit, configured to store a routing table.
  • the binding update notification message is an ARP packet
  • the sender MAC address of the binding update notification message is the first PE.
  • MAC address The sender IP address of the binding update notification message is the IP address of the second terminal device.
  • the binding update notification message is a neighbor advertisement message (NA message)
  • NA message the source MAC address of the binding update notification message is the MAC address of the first PE
  • the source IP address of the binding update notification message is The IP address of the second terminal device.
  • the access notification message is a gratuitous ARP packet
  • the sender IP address and the destination IP address of the access notification message are both The IP address of the first terminal device, the sender MAC address of the access notification message is the MAC address of the first terminal device, and the destination MAC address of the access notification message is the broadcast address.
  • the access notification message is an unsolicited neighbor advertisement message
  • the source IP address of the access notification message is the IP address of the first terminal device
  • the source MAC address of the access notification message is the MAC address of the first terminal device.
  • the destination IP address of the access notification packet is the multicast address of all the nodes, and the destination address carried by the access notification packet is the IP address of the first terminal device.
  • a method of implementing L3VPN is provided.
  • the first PE receives the access notification message sent by the first terminal device.
  • the access notification message carries the IP address of the first terminal device.
  • the access notification message is used to notify the first PE that the first terminal device accesses the first site.
  • the first site and the second site access the same L3VPN.
  • the first site accesses the L3VPN through the first PE.
  • the first PE obtains the IP address of the second PE according to the ID of the VPN associated with the interface that receives the access notification message and the IP address of the first terminal device.
  • the second site accesses the L3VPN through the second PE.
  • the first terminal device accesses the second site before accessing the first site.
  • the first PE obtains the IP address of the second terminal device according to the ID of the VPN and the IP address of the second PE associated with the interface that receives the access notification message.
  • the IP address of the second terminal device is different from the IP address of the first terminal device.
  • the second terminal device accesses the second site.
  • the first PE sends a binding update notification message to the first terminal device.
  • the binding update notification message carries the MAC address of the first PE and the IP address of the second terminal device.
  • the first implementation manner is provided.
  • the first PE obtains the IP address of the second PE according to the ID of the VPN associated with the interface that receives the access notification message and the IP address of the first terminal device, including
  • the first PE obtains the IP address of the second PE by querying the routing table according to the VPN ID and the IP address of the first terminal device.
  • the IP address query routing table obtains the IP address of the second terminal device.
  • a second implementation manner the method further includes: receiving, by the first PE, a route revocation message sent by the second PE.
  • the route revocation message carries an IP address prefix, VPN information, and an IP address of the second PE.
  • the route revocation message is used to revoke the host route corresponding to the IP address prefix.
  • the VPN information is used to identify the VPN to which the host route belongs.
  • the first PE according to the ID of the VPN associated with the interface that receives the access notification message and the IP address of the first terminal device Obtaining an IP address of the second PE, the first PE determines whether the IP address of the first terminal device carried in the access notification message corresponds to an IP address prefix carried in the route revocation message, and whether the VPN ID corresponds to the VPN information identifier.
  • the VPN when the IP address of the first terminal device carried in the access notification message corresponds to the IP address prefix carried in the route revocation message, and the VPN ID corresponds to the VPN identified by the VPN information, obtains the second carried in the route revocation message. IP address of the PE.
  • the first PE obtains the IP address of the second terminal device according to the ID of the VPN associated with the interface that receives the access notification message and the IP address of the second PE, including: the first PE passing the VPN ID and the IP of the second PE
  • the address query routing table obtains the IP address of the second terminal device.
  • the binding update notification message is an ARP packet
  • the sender MAC address of the binding update notification message is the first PE.
  • the MAC address, the sender IP address of the binding update notification message is the IP address of the second terminal device.
  • the binding update notification message is an NA message
  • the source MAC address of the binding update notification message is the MAC address of the first PE
  • the source IP address of the binding update notification message is the IP address of the second terminal device.
  • the access notification message is a gratuitous ARP packet
  • the sender IP address and the destination IP address of the access notification message are both The IP address of the first terminal device, the sender MAC address of the access notification message is the MAC address of the first terminal device, and the destination MAC address of the access notification message is a broadcast address.
  • the access notification message is an unsolicited NA message
  • the source IP address of the access notification message is the IP address of the first terminal device
  • the source MAC address of the access notification message is the first terminal.
  • the MAC address of the device, the destination IP address of the access notification packet is the multicast address of all nodes, and the destination address carried in the access notification packet is the IP address of the first terminal device.
  • the fifth implementation manner is further provided, the method further includes: saving, by the first PE, a correspondence between a MAC address of the first terminal device and an IP address of the first terminal device
  • the access notification message also carries the MAC address of the first terminal device.
  • a device which is a first terminal device, including a transmitting and receiving unit, a processing unit, and a storage unit.
  • the sending and receiving unit is configured to send an access notification message to the PE.
  • the access notification message carries the IP address of the first terminal device.
  • the access notification message is used to notify the PE that the first terminal device accesses the first site.
  • the first site and the second site access the same L3VPN.
  • the first site accesses the L3VPN through the PE.
  • the sending and receiving unit is further configured to receive a binding update notification message sent by the PE.
  • the binding update notification message carries the MAC address of the PE and the IP address of the second terminal device.
  • the IP address of the second terminal device is different from the IP address of the first terminal device.
  • the second terminal device accesses the second site.
  • the processing unit is configured to trigger the storage unit to store the correspondence between the MAC address of the PE and the IP address of the second terminal device.
  • the storage unit is configured to store a correspondence between a MAC address of the PE and an IP address of the second terminal device.
  • the access notification message is a gratuitous ARP packet
  • the sender IP address and the destination IP address of the access notification message are both the IP address of the first terminal device
  • the access notification The sender MAC address of the packet is the MAC address of the first terminal device
  • the destination MAC address of the access notification packet is the broadcast address.
  • the access notification message is an unsolicited neighbor advertisement message, where the source IP address of the access notification message is the IP address of the first terminal device, and the source MAC address of the access notification message is the MAC address of the first terminal device.
  • the destination IP address of the access notification packet is the multicast address of all the nodes, and the destination address carried by the access notification packet is the IP address of the first terminal device.
  • a method for implementing an L3VPN includes the following operations.
  • the first terminal device sends an access notification message to the PE.
  • the access notification message carries the IP address of the first terminal device.
  • the access notification message is used to notify the PE that the first terminal device accesses the first site.
  • the first site and the second site access the same L3VPN.
  • the first site accesses the L3VPN through the PE.
  • the first terminal device receives the binding update notification message sent by the PE.
  • the binding update notification message carries the MAC address of the PE and the IP address of the second terminal device.
  • the IP address of the second terminal device is different from the IP address of the first terminal device.
  • the second terminal device accesses the second site.
  • the first terminal device stores a correspondence between a MAC address of the PE and an IP address of the second terminal device.
  • the access notification message is a gratuitous ARP packet
  • the sender IP address and the destination IP address of the access notification message are all IP addresses of the first terminal device
  • the access notification is The sender MAC address of the packet is the MAC address of the first terminal device
  • the destination MAC address of the access notification packet is the broadcast address.
  • the access notification message is an unsolicited neighbor advertisement message
  • the source IP address in the access notification message is the IP address of the first terminal device
  • the source MAC address of the access notification message is the MAC address of the first terminal device.
  • the destination IP address of the access notification packet is the multicast address of all the nodes, and the destination address carried by the access notification packet is the IP address of the first terminal device.
  • the first terminal device when the first terminal device migrates from the second site to the first site, the first terminal device sends an access notification message to the first PE connected to the first terminal device.
  • the first PE receives the access notification packet, and obtains the IP address of the second terminal device in the second site.
  • the first PE sends a binding update notification message to the first terminal device.
  • the first terminal device stores a correspondence between the MAC address of the first PE and the IP address of the second terminal device according to the binding update notification message. Therefore, after the first terminal device migrates from the second site to the first site, the MAC address of the first PE can be used to communicate with the second terminal device in the second site, thereby helping to solve the problem in the prior art because the terminal device The migration caused problems that could not be communicated.
  • FIG. 1 is a schematic diagram of an application scenario according to an embodiment of the present invention.
  • FIG. 2 is a flowchart of a method for implementing a L3VPN by a PE according to an embodiment of the present invention
  • FIG. 3 is a flowchart of a method for implementing a L3VPN by a terminal device according to an embodiment of the present invention
  • FIG. 4 is a simplified structural block diagram of a network device according to an embodiment of the present invention.
  • FIG. 5 is a schematic structural block diagram of a network device according to an embodiment of the present invention.
  • FIG. 6 is a schematic structural block diagram of a terminal device according to an embodiment of the present invention.
  • FIG. 7 is a block diagram showing a simplified hardware structure of a terminal device according to an embodiment of the present invention.
  • FIG. 1 is a schematic diagram of an application scenario according to an embodiment of the present invention.
  • the third terminal device 110 accesses the first site, and the first site accesses the Layer 3 virtual private network (L3VPN) through the first PE 102.
  • the second terminal device 108 accesses the second site.
  • the second site accesses the L3VPN through the second PE 104.
  • the first site and the second site access the same L3VPN.
  • the first terminal device 106 migrates from the second site to the first site.
  • L3VPN Layer 3 virtual private network
  • FIG. 2 is a flowchart of a method for implementing a L3VPN by a PE according to an embodiment of the present invention. As shown in FIG. 2, the method provided by this embodiment includes the following operations.
  • Step 202 The first PE 102 receives the access notification message sent by the first terminal device 106.
  • the access notification message carries the IP address of the first terminal device.
  • the access notification message is used to notify the first PE that the first terminal device accesses the first site. For example, as shown in FIG. 1 , when the first terminal device 106 migrates from the second site to the first site, the first terminal device sends an attach notification message.
  • the access notification message may be broadcasted in the first site.
  • the access notification message may be a gratuitous ARP packet, the sender IP address of the access notification message, and the target.
  • the IP address of the first terminal device 106 is the IP address of the first terminal device 106.
  • the MAC address of the sender of the access notification message is the MAC address of the first terminal device 106, and the destination MAC address of the access notification message is broadcast ( Broadcast) address.
  • the access notification message may be an unsolicited advertisement message (unsolicited NA message), and the source IP address of the access notification message.
  • the address is the IP address of the first terminal device 106
  • the source MAC address of the access notification message is the MAC address of the first terminal device 106
  • the destination IP address of the access notification message is the multicast address of all nodes. (all-nodes multicast address)
  • the target address carried in the access notification message is the IP address of the first terminal device.
  • the first notification message can be sent only to the first PE 102.
  • the access notification message is an ARP packet
  • the sender IP address of the access notification message is an IP address of the first terminal device 106
  • the sender MAC address of the access notification message is the first terminal device 106.
  • the MAC address, the destination IP address of the access notification message is the IP address of the first PE 102, and the destination MAC address of the access notification message is the MAC address of the first PE 102.
  • Step 204 The first PE 102 obtains the IP address of the second PE 104 according to the virtual private network identifier (VPN identifier) and the IP address of the first terminal device 106.
  • the VPN ID identifies the VPN associated with the interface that receives the access notification message.
  • the scheme of the two implementation steps 204 is exemplarily described below.
  • the first PE 102 may query the interface table according to the interface number that receives the access notification message, and obtain the VPN ID bound to the interface that receives the access notification message.
  • the first PE 102 queries the routing table according to the VPN ID and the IP address of the first terminal device 106, and obtains the IP address of the second PE 104.
  • the IP address of the second PE 104 corresponds to the VPN ID and the IP address of the first terminal device 106.
  • the routing table can be stored in the first PE 102.
  • the routing table can be stored on a server.
  • Table 1 shows an example of an interface table.
  • Table 2 shows an example of a routing table.
  • VPN ID IP prefix Next hop Vpn blue IP address of the first terminal IP address of the second PE104 Vpn blue IP address of the second terminal IP address of the second PE104
  • the method shown in FIG. 2 may further include: the first PE 102 receives a route revocation message sent by the second PE 104.
  • the route revocation message carries an IP address prefix, VPN information, and an IP address of the second PE 104.
  • the VPN information is used to identify the VPN to which the host route belongs.
  • the VPN information may be a route target.
  • the route revocation message is used to revoke the host route corresponding to the IP address prefix.
  • the first PE 102 determines that the IP address of the first terminal device carried in the access notification message corresponds to the IP address prefix carried in the route revocation message, and the VPN ID bound to the interface of the access notification message is carried in the route revocation message.
  • the IP address of the second PE 104 carried in the route revocation message is obtained.
  • Step 206 The first PE 102 obtains the IP address of the second terminal device 108 according to the IP address of the second PE 104 and the VPN ID bound to the interface that receives the access notification message.
  • the IP address of the second terminal device 108 is different from the IP address of the first terminal device 106.
  • the first PE 102 can obtain the IP address of the second terminal device 108 according to the routing table shown in Table 2 of the VPN ID bound to the interface of the second PE 104 and the interface that receives the access notification message.
  • Step 208 The first PE 102 sends a binding update notification message to the first terminal device 106.
  • the binding update notification message carries the MAC address of the first PE 102 and the IP address of the second terminal device 108.
  • the first PE 102 may only send a binding update notification message to the first terminal device 106.
  • the first PE 102 may also broadcast a binding update notification message in the first site.
  • the binding update notification message is an ARP packet
  • the sender MAC address of the binding update notification message is the MAC address of the first PE 102
  • the sender IP address of the binding update notification message is the second terminal device.
  • the binding update notification message is a neighbor message (NA message)
  • the source MAC address of the binding update notification message is the MAC address of the first PE 102
  • the source IP address of the binding update notification message is the second terminal device.
  • the method shown in FIG. 2 may further include: the first PE 102 saves a correspondence between a MAC address of the first terminal device 106 and an IP address of the first terminal device 106.
  • the first terminal device 106 when the first terminal device 106 accesses the second site, the first terminal device 106 stores the correspondence between the IP address of the second terminal device 108 and the MAC address of the second terminal device 108. After the first terminal device 106 migrates from the second site to the first site, after the first terminal device 106 receives the binding update notification message sent by the first PE 102, the first terminal device 106 updates the previously stored correspondence. In other words, the correspondence between the IP address of the second terminal device 108 and the MAC address of the first PE 102 is saved.
  • the first notification message is sent to the first PE 102.
  • the first PE 102 receives the access notification message and obtains the IP address of the second terminal device 108 in the second site.
  • the first PE 102 sends a binding update notification message to the first terminal device 106.
  • First terminal The backup 106 stores the correspondence between the MAC address of the first PE 102 and the IP address of the second terminal device 108 according to the binding update notification message. Therefore, after the first terminal device 106 migrates from the second site to the first site, the MAC address of the first PE 102 can be used to communicate with the second terminal device 108 in the second site, thereby helping to solve the problem in the prior art.
  • the migration of the terminal device causes a problem of communication failure.
  • FIG. 3 is a flowchart of a method for implementing a L3VPN by a terminal device according to an embodiment of the present invention. As shown in FIG. 3, the method provided by the embodiment of the present invention includes the following operations.
  • the first terminal device 106 migrates from the second site to the first site, the first terminal device 106 sends an access notification message to the first PE 102.
  • the access notification message carries the IP address of the first terminal device 106, and the access notification message is used to notify the first PE 102 that the first terminal device 106 is connected to the first site.
  • the first site and the second site access the same L3VPN. The first site accesses the L3VPN through the first PE 102.
  • the first terminal device 106 receives the binding update notification message sent by the first PE 102.
  • the binding update notification message carries the MAC address of the first PE 102 and the IP address of the second terminal device 108, and the IP address of the second terminal device 108 is different from the IP address of the first terminal device 106.
  • the second terminal device 108 accesses the second site.
  • the first terminal device 106 stores a correspondence between a MAC address of the first PE 102 and an IP address of the second terminal device 108.
  • FIG. 4 is a simplified structural block diagram of a network device according to an embodiment of the present invention.
  • the network device 400 provided by the embodiment of the present invention is a first PE.
  • Network device 400 includes a transmit and receive unit 402 and a processing unit 404.
  • the sending and receiving unit 402 is configured to receive an access notification message sent by the first terminal device.
  • the access notification message carries the IP address of the first terminal device.
  • the access notification message is used to notify the first PE that the first terminal device accesses the first site.
  • the processing unit 404 is configured to obtain an IP address of the second PE according to the VPN ID bound to the interface that receives the access notification message and the IP address of the first terminal device.
  • the second site accesses the L3VPN through the second PE.
  • the first terminal device accesses the second site before accessing the first site.
  • the processing unit 404 is further configured to obtain an IP address of the second terminal device by using an IP address of the second PE and a VPN ID bound to the interface that receives the access notification message, where the IP address of the second terminal device is the first terminal The IP address of the device is different.
  • the sending and receiving unit 402 is further configured to send a binding update notification message to the first terminal device.
  • the binding update notification message carries the MAC address of the first PE and the IP address of the second terminal device.
  • the network device shown in FIG. 4 may further include a storage unit, configured to store a routing table.
  • the processing unit 404 can query the routing table according to the IP address of the second PE and the VPN ID bound to the interface that receives the access notification message, and obtain the IP address of the second terminal device.
  • processing unit 404 can include a first determining module and a second determining module.
  • the first determining module is configured to query by using a VPN ID bound according to an IP address of the first terminal device and an interface that receives the access notification message
  • the routing table obtains the IP address of the second PE.
  • the second determining module is configured to obtain an IP address of the second terminal device by querying the routing table according to the VPN ID bound to the IP address of the second PE and the interface receiving the access notification message.
  • the sending and receiving unit 402 is further configured to receive a route revocation message sent by the second PE.
  • the route revocation message carries an IP address prefix, VPN information, and an IP address of the second PE.
  • the route revocation message is used to revoke the host route corresponding to the IP address prefix, and the VPN information is used to identify the VPN to which the host route belongs.
  • the processing unit 404 can include a third determining module and a fourth determining module.
  • the third determining module is configured to determine whether the IP address of the first terminal device carried in the access notification message corresponds to the IP address prefix carried in the route revocation message, and whether the VPN ID bound to the interface that receives the access notification message is Corresponding to the VPN identified by the VPN information carried in the route revocation message, the IP address of the first terminal device carried in the access notification message corresponds to the IP address prefix carried in the route revocation message, and the interface for receiving the access notification message
  • the bound VPN ID corresponds to the VPN identified by the VPN information carried in the route revocation message
  • the IP address of the second PE carried in the route revocation message is obtained.
  • the fourth determining module is configured to obtain an IP address of the second terminal device by querying the routing table according to the VPN ID bound to the IP address of the second PE and the interface receiving the access notification message.
  • FIG. 5 is a schematic block diagram of a simplified hardware structure of a network device according to an embodiment of the present invention.
  • the network device 500 provided by the embodiment of the present invention is a first PE.
  • Network device 500 includes input/output circuitry 502, processor 504, and memory 506.
  • the input/output circuit 502 is configured to receive an access notification message sent by the first terminal device.
  • the access notification message carries the IP address of the first terminal device.
  • the access notification message is used to notify the first PE that the first terminal device accesses the first site.
  • the processor 504 is configured to obtain an IP address of the second PE according to the VPN ID bound to the interface that receives the access notification message and the IP address of the first terminal device.
  • the second site accesses the L3VPN through the second PE.
  • the first terminal device accesses the second site before accessing the first site.
  • the processor 504 is further configured to obtain an IP address of the second terminal device by using an IP address of the second PE and a VPN ID bound to the interface that receives the access notification message, where the IP address of the second terminal device is the first terminal The IP address of the device is different.
  • the input/output circuit 502 is further configured to send a binding update notification message to the first terminal device.
  • the binding update notification message carries the MAC address of the first PE and the IP address of the second terminal device.
  • Memory 506 is for storing program instructions that, when executed, cause processor 504 to perform the operations described above.
  • the memory 506 may be a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk. Or a variety.
  • the program code may be already installed in the network device 500, or downloaded as needed during operation.
  • memory 506 can include a database that stores network resource information, such as a routing table.
  • FIG. 6 is a simplified structural block diagram of a terminal device according to an embodiment of the present invention.
  • the first terminal device 600 provided by the embodiment of the present invention includes a sending and receiving unit 602, a processing unit 604, and a storage unit 606.
  • the sending and receiving unit 602 is configured to send an access notification message to the PE.
  • the access notification message carries the IP address of the first terminal device 600.
  • the access notification message is used to notify the PE that the first terminal device 600 accesses the first site.
  • the first site and the second site access the same L3VPN.
  • the first site accesses the L3VPN through the PE.
  • the sending and receiving unit 602 is further configured to receive a binding update notification message sent by the PE.
  • the binding update notification message carries the MAC address of the PE and the IP address of the second terminal device.
  • the IP address of the second terminal device is different from the IP address of the first terminal device.
  • the second terminal device accesses the second site.
  • the processing unit 604 is configured to trigger the storage unit 606 to store the correspondence between the MAC address of the PE and the IP address of the second terminal device.
  • the storage unit 606 is configured to store a correspondence between a MAC address of the PE and an IP address of the second terminal device.
  • FIG. 7 is a block diagram showing a simplified hardware structure of a terminal device according to an embodiment of the present invention.
  • the first terminal device 700 provided by the embodiment of the present invention includes an input/output circuit 702, a processor 704, and a memory 706.
  • the input/output circuit 702 is configured to send an access notification message to the PE.
  • the access notification message carries the IP address of the first terminal device 700.
  • the access notification message is used to notify the PE that the first terminal device 700 accesses the first site.
  • the first site and the second site access the same L3VPN.
  • the first site accesses the L3VPN through the PE.
  • the input/output circuit 702 is further configured to receive a binding update notification message sent by the PE.
  • the binding update notification message carries the MAC address of the PE and the IP address of the second terminal device.
  • the IP address of the second terminal device is different from the IP address of the first terminal device.
  • the second terminal device accesses the second site.
  • the processor 704 is configured to trigger the memory 706 to store a correspondence between a MAC address of the PE and an IP address of the second terminal device.
  • the memory 706 is configured to store a correspondence between a MAC address of the PE and an IP address of the second terminal device.
  • the memory 706 is also used to store program instructions that, when executed, cause the processor 704 to perform the operations described above.
  • the memory 706 may be a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. Or a variety.
  • the program code may be already installed in the first terminal device 700, or downloaded as needed during operation.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Abstract

本申请提供一种实现三层虚拟专用网（L3VPN）的方法和装置。该方法包括：第一PE接收第一终端设备发送的接入通知报文，其中携带第一终端设备的IP地址，接入通知报文用于向第一PE通知第一终端设备接入第一site。第一site通过第一PE接入L3VPN。第一PE根据与接收接入通知报文的接口相关联的VPN的ID和第一终端设备的IP地址获得第二PE的IP地址，第二site通过第二PE接入该L3VPN。第一终端设备接入第一site之前接入第二site。第一PE根据第二PE的IP地址和与接收接入通知报文的接口相关联的VPN的ID获得第二终端设备的IP地址。第二终端设备的IP地址与第一终端设备的IP地址不同。第二终端设备接入第二Site。第一PE向第一终端设备发送绑定更新通知报文，其中携带第一PE的MAC地址和第二终端设备的IP地址。

Description

实现三层虚拟专用网的方法和设备
本申请要求于2013年09月23日提交中国专利局、申请号为CN 201310437112.9、发明名称为“实现三层虚拟专用网的方法和设备”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及通信技术，尤其涉及一种实现三层虚拟专用网的方法和设备。
背景技术
服务提供商(service provider，简称SP)可以利用互联网协议骨干网(Internet protocol backbone，简称IP backbone)为用户提供虚拟专用网(Virtual Private Network，简称VPN)。三层虚拟专用网(Layer3Virtual Private Network，简称L3VPN)使主机和路由器基于三层地址互相连接。L3VPN可以是边界网关协议(Border Gateway Protocol，简称BGP)VPN或多协议标签交换(Multi-protocol Label Switching，简称MPLS)VPN。
终端设备向其连接的运营商边缘(Provider Edge,PE)设备发送地址解析协议(Address Resolution Protocol，简称ARP)请求，询问同一局域网中的某个远端终端设备的IP地址对应的媒体接入控制(Media Access Control,MAC)地址。收到ARP请求的PE将该PE的MAC地址返回给发送所述ARP请求的终端设备。该PE会将ARP表中本地终端设备对应的主机路由信息通过BGP向外广播。举例来说，终端设备，可以是手机、个人计算机(personal computer，简称PC)、IP电视(Internet Protocol television，简称IPTV)、平板电脑等设备中的至少一个。
VPN站点(VPN site，下文简称site)是VPN用户的位置，经由用户边缘-运营商边缘链路(customer edge-Provider Edge link，简称CE-PE link)连接SP网络。Site可以接入至少一个VPN。举例来说，site1和site2接入同一个L3VPN。Site2中的终端设备1访问site2中的终端设备2时，使用终端设备2的MAC地址作为目的MAC地址。
当终端设备1从site2迁移到site1时，终端设备1的ARP表中保存的还是终端设备2的MAC地址。终端设备1访问终端设备2时，仍使用终端设备2的MAC地址作为报文的目的MAC地址，导致终端设备1无法访问终端设备2。
发明内容
本发明实施例提供一种实现L3VPN的方法和设备。
第一方面，提供一种网络设备，该网络设备为第一PE，应用于L3VPN中。第一site和第二site接入同一L3VPN。第一site通过第一PE接入L3VPN。第一PE包括发送接收单元和处理单元。发送接收单元用于接收第一终端设备发送的接入(attachment)通知报文。接入通知报文携带第一终端设备的IP地址。接入通知报文用于向第一PE通知第一终端设备接入第一site。处理单元用于根据虚拟专用网标识(VPN ID)和第一终端设备的IP地址获得第二PE的IP地址。第二site通过第二PE接入L3VPN。第一终端设备接入第一site之前接入第二site。上述VPN ID标识与接收所述接入通知报文的接口相关联的VPN。处理单元还用于通过根据该VPN ID和第二PE的IP地址获得第二终端设备的IP地址。第二终端设备的IP地址与第一终端设备的IP地址不同。第二终端设备接入第二site。发送接收单元还用于向第一终端设备发送绑定更新通知报文。绑定更新通知报文携带第一PE的MAC地址和第二终端设备的IP地址。
根据第一方面，提供第一种实现方式，处理单元包括第一确定模块和第二确定模块。第一确定模块用于通过根据该VPN ID和第一终端设备的IP地址查询路由表获得第二PE的IP地址。第二确定模块，用于通过根据该VPN ID和第二PE的IP地址查询路由表获得第二终端设备的IP地址。
根据第一方面，提供第二种实现方式，发送接收单元还用于接收第二PE发送的路由撤消消息。路由撤消消息携带IP地址前缀、VPN信息和第二PE的IP地址。路由撤销消息用于撤消IP地址前缀对应的主机路由。VPN信息用于标识主机路由所属的VPN。处理单元包括：第三确定模块，用于确定接入通知报文中携带的第一终端设备的IP地址是否对应路由撤消消息中携带的IP地址前缀，以及VPN ID是否对应VPN信息标识的VPN，当接入通知报文中携带的第一终端设备的IP地址对应路由撤消消息中携带的IP地址前缀，并且VPN ID对应VPN信息标识的VPN时，获得路由撤消消息中携带的第二PE的IP地址。第四确定模块，用于通过根据所述VPN ID和所述获得的所述第二PE的IP地址查询路由表获得所述第二终端设备的IP地址。
根据第一方面的第一种或者第二种实现方式，提供第三种实现方式，网络设备还包括：存储单元，用于存储路由表。
根据第一方面或者第一方面的上述任一种实现方式，提供第四种实现方式，绑定更新通知报文为ARP报文，绑定更新通知报文的发送者MAC地址为第一PE的MAC地址， 绑定更新通知报文的发送者IP地址为第二终端设备的IP地址。或者，绑定更新通知报文为邻居通告消息(neighbor advertisement message,NA message)，绑定更新通知报文的源MAC地址为第一PE的MAC地址，绑定更新通知报文的源IP地址为第二终端设备的IP地址。
根据第一方面或者第一方面的上述任何一种实现方式，提供第五种实现方式，接入通知报文为免费ARP报文，接入通知报文的发送者IP地址以及目标IP地址均为第一终端设备的IP地址，接入通知报文的发送者MAC地址为第一终端设备的MAC地址，接入通知报文的目的MAC地址为广播地址。或者，接入通知报文为非请求邻居通告消息，接入通知报文的源IP地址为第一终端设备的IP地址，接入通知报文的源MAC地址为第一终端设备的MAC地址，接入通知报文的目的IP地址为所有节点多播地址,接入通知报文携带的目标地址是第一终端设备的IP地址。
第二方面，提供一种实现L3VPN的方法。第一PE接收第一终端设备发送的接入通知报文。接入通知报文携带第一终端设备的IP地址。接入通知报文用于向第一PE通知第一终端设备接入第一site。第一site和第二site接入同一L3VPN。第一site通过第一PE接入L3VPN。第一PE根据与接收所述接入通知报文的接口相关联的VPN的ID和第一终端设备的IP地址获得第二PE的IP地址。第二site通过第二PE接入L3VPN。第一终端设备接入第一site之前接入第二site。第一PE通过根据与接收所述接入通知报文的接口相关联的VPN的ID和第二PE的IP地址获得第二终端设备的IP地址。第二终端设备的IP地址与第一终端设备的IP地址不同。第二终端设备接入第二Site。第一PE向第一终端设备发送绑定更新通知报文。绑定更新通知报文携带第一PE的MAC地址和第二终端设备的IP地址。
根据第二方面，提供第一种实现方式，第一PE根据与接收所述接入通知报文的接口相关联的VPN的ID和第一终端设备的IP地址获得第二PE的IP地址，包括：第一PE通过根据该VPN ID和第一终端设备的IP地址查询路由表获得第二PE的IP地址。第一PE根据与接收所述接入通知报文的接口相关联的VPN的ID和第二PE的IP地址获得第二终端设备的IP地址，包括：第一PE通过该VPN ID和第二PE的IP地址查询路由表获得第二终端设备的IP地址。
根据第二方面，提供第二种实现方式，该方法还包括：第一PE接收第二PE发送的路由撤消消息。路由撤消消息携带IP地址前缀、VPN信息和第二PE的IP地址。路由撤销消息用于撤消IP地址前缀对应的主机路由，VPN信息用于标识主机路由所属的VPN。第一PE根据与接收所述接入通知报文的接口相关联的VPN的ID和第一终端设备的IP地 址获得第二PE的IP地址，包括：第一PE确定接入通知报文中携带的第一终端设备的IP地址是否对应路由撤消消息中携带的IP地址前缀，以及VPN ID是否对应VPN信息标识的VPN，当接入通知报文中携带的第一终端设备的IP地址对应路由撤消消息中携带的IP地址前缀，并且VPN ID对应VPN信息标识的VPN时，获得路由撤消消息中携带的第二PE的IP地址。第一PE根据与接收接入通知报文的接口相关联的VPN的ID和第二PE的IP地址获得第二终端设备的IP地址，包括：第一PE通过该VPN ID和第二PE的IP地址查询路由表获得第二终端设备的IP地址。
根据第二方面或者第二方面的上述任何一种实现方式，提供第三种实现方式，绑定更新通知报文为ARP报文，绑定更新通知报文的发送者MAC地址为第一PE的MAC地址，绑定更新通知报文的发送者IP地址为第二终端设备的IP地址。或者，绑定更新通知报文为NA message，绑定更新通知报文的源MAC地址为第一PE的MAC地址，绑定更新通知报文的源IP地址为第二终端设备的IP地址。
根据第二方面或者第二方面的上述任何一种实现方式，提供第四种实现方式，接入通知报文为免费ARP报文，接入通知报文的发送者IP地址以及目标IP地址均为第一终端设备的IP地址，接入通知报文的发送者MAC地址为第一终端设备的MAC地址，接入通知报文的目的MAC地址为广播(broadcast)地址。或者，接入通知报文为非请求邻居通告消息(unsolicited NA message)，接入通知报文的源IP地址为第一终端设备的IP地址，接入通知报文的源MAC地址为第一终端设备的MAC地址，接入通知报文的目的IP地址为所有节点多播地址,接入通知报文携带的目标地址是第一终端设备的IP地址。
根据第二方面或者第二方面的上述任何一种实现方式，提供第五种实现方式，该方法还包括：第一PE保存第一终端设备的MAC地址和第一终端设备的IP地址的对应关系，接入通知报文中还携带第一终端设备的MAC地址。
第三方面，提供一种设备，该设备为第一终端设备，包括发送接收单元、处理单元和存储单元。发送接收单元用于向PE发送接入通知报文。接入通知报文携带第一终端设备的IP地址。接入通知报文用于向PE通知第一终端设备接入第一site。第一site和第二site接入同一L3VPN。第一site通过PE接入L3VPN。发送接收单元还用于接收PE发送的绑定更新通知报文。绑定更新通知报文携带PE的MAC地址和第二终端设备的IP地址。第二终端设备的IP地址与第一终端设备的IP地址不同。第二终端设备接入第二site。处理单元用于触发存储单元存储PE的MAC地址和第二终端设备的IP地址的对应关系。存储单元用于存储PE的MAC地址和第二终端设备的IP地址的对应关系。
根据第三方面，提供第一种实现方式，接入通知报文为免费ARP报文，接入通知报文的发送者IP地址以及目标IP地址均为第一终端设备的IP地址，接入通知报文的发送者MAC地址为第一终端设备的MAC地址，接入通知报文的目的MAC地址为广播地址。或者，所述接入通知报文为非请求邻居通告消息，接入通知报文的源IP地址为第一终端设备的IP地址，接入通知报文的源MAC地址为第一终端设备的MAC地址，接入通知报文的目的IP地址为所有节点多播地址,接入通知报文携带的目标地址是第一终端设备的IP地址。
第四方面，提供一种实现L3VPN的方法。该方法包括下述操作。第一终端设备向PE发送接入通知报文。接入通知报文携带第一终端设备的IP地址。接入通知报文用于向PE通知第一终端设备接入第一site。第一site和第二site接入同一L3VPN。第一site通过PE接入L3VPN。第一终端设备接收PE发送的绑定更新通知报文。绑定更新通知报文携带PE的MAC地址和第二终端设备的IP地址。第二终端设备的IP地址与第一终端设备的IP地址不同。第二终端设备接入第二site。第一终端设备存储PE的MAC地址和第二终端设备的IP地址的对应关系。
根据第四方面，提供第一种实现方式，接入通知报文为免费ARP报文，接入通知报文的发送者IP地址以及目标IP地址均为第一终端设备的IP地址，接入通知报文的发送者MAC地址为第一终端设备的MAC地址，接入通知报文的目的MAC地址为广播地址。或者，接入通知报文为非请求邻居通告消息，接入通知报文中的源IP地址为第一终端设备的IP地址，接入通知报文的源MAC地址为第一终端设备的MAC地址，接入通知报文的目的IP地址为所有节点多播地址,接入通知报文携带的目标地址是第一终端设备的IP地址。
上述技术方案中，第一终端设备从第二site迁移到第一site时，向与该第一终端设备相连的第一PE发送接入通知报文。第一PE接收到接入通知报文，获得第二site中的第二终端设备的IP地址。第一PE向第一终端设备发送绑定更新通知报文。第一终端设备根据绑定更新通知报文，存储第一PE的MAC地址与第二终端设备的IP地址的对应关系。因此，第一终端设备从第二site迁移到第一site后，可以使用第一PE的MAC地址与第二site中的第二终端设备进行通信，从而有助于解决现有技术中因为终端设备的迁移导致不能通信的问题。
附图说明
图1为本发明实施例的一种应用场景图；
图2为本发明实施例提供的PE实现L3VPN的方法流程图；
图3为本发明实施例提供的终端设备实现L3VPN的方法流程图；
图4为本发明实施例提供的网络设备的简化结构框图；
图5为本发明实施例提供的网络设备的简化硬件结构框图；
图6为本发明实施例提供的终端设备的简化结构框图；
图7为本发明实施例提供的终端设备的简化硬件结构框图。
具体实施方式
为使本发明的目的、技术方案和优点更加清楚，下面将结合附图和实施例，对本发明的技术方案进行清楚、完整地描述。显然，下述的各个实施例都只是本发明一部分的实施例。基于本发明下述的各个实施例，本领域普通技术人员即使没有作出创造性劳动，也可以通过等效变换部分甚至全部的技术特征，而获得能够解决本发明技术问题，实现本发明技术效果的其它实施例，而这些变换而来的各个实施例显然并不脱离本发明所公开的范围。
图1为本发明实施例的一种应用场景图。如图1所示，第三终端设备110接入第一site，第一site通过第一PE102接入三层虚拟专用网(L3VPN)。第二终端设备108接入第二site。第二site通过第二PE104接入上述L3VPN，换言之，第一site和第二site接入同一L3VPN。如图1所示，第一终端设备106从第二site迁移到第一site。
基于图1的应用场景，图2为本发明实施例提供的PE实现L3VPN的方法流程图。如图2所示，本实施例提供的方法包括下述操作。
步骤202：第一PE102接收第一终端设备106发送的接入通知报文。接入通知报文携带第一终端设备的IP地址。接入通知报文用于向第一PE通知第一终端设备接入第一site。举例来说，参见图1所示，第一终端设备106从第二site迁移到第一site时，第一终端设备发送接入(attachment)通知报文。
举例来说，第一终端设备106从第二site迁移到第一site时，可以在所述第一site中广播接入通知报文。如果第一终端设备106支持第四版互联网协议(Internet Protocol version4，IPv4)，接入通知报文可以是免费ARP报文，接入通知报文的发送者IP地址以及目标 IP地址(target IP address)均为第一终端设备106的IP地址，接入通知报文的发送者MAC地址为第一终端设备106的MAC地址，接入通知报文的目的MAC地址为广播(broadcast)地址。如果第一终端设备106支持第六版互联网协议(Internet Protocol version6,IPv6)，接入通知报文可以是非请求邻居通告消息(unsolicited Neighbor Advertisement message,unsolicited NA message)，接入通知报文的源IP地址为第一终端设备106的IP地址，接入通知报文的源MAC地址为第一终端设备106的MAC地址，接入通知报文的目的IP地址(destination IP address)为所有节点多播地址(all-nodes multicast address),接入通知报文携带的目标地址(target address)是第一终端设备的IP地址。
又举例来说，第一终端设备106从第二site迁移到第一site时，可以只向第一PE102发送接入通知报文。可选地，接入通知报文为ARP报文，接入通知报文的发送者IP地址为第一终端设备106的IP地址，接入通知报文的发送者MAC地址为第一终端设备106的MAC地址，接入通知报文的目标IP地址为第一PE102的IP地址，接入通知报文的目标MAC地址为第一PE102的MAC地址。
步骤204：第一PE102根据虚拟专用网标识(VPN identifier,VPN ID)和第一终端设备106的IP地址获得第二PE104的IP地址。VPN ID标识与接收所述接入通知报文的接口相关联的VPN。下面示例性地描述两种实现步骤204的方案。
例如，第一PE102可以根据接收到接入通知报文的接口号查询接口表，获得接收到接入通知报文的接口所绑定的VPN ID。第一PE102根据VPN ID和第一终端设备106的IP地址查询路由表，获得第二PE104的IP地址。第二PE104的IP地址对应该VPN ID和第一终端设备106的IP地址。可选地，路由表可以存储在第一PE102中。或者，路由表可以存储在一个服务器上。表1示出了接口表的一个示例。表2示出了路由表的一个示例。
表1接口表的示例
接口号 VPN ID
1 vpn blue
2 vpn red
表2路由表的示例
VPN ID IP前缀 下一跳
vpn blue 第一终端的IP地址 第二PE104的IP地址
vpn blue 第二终端的IP地址 第二PE104的IP地址
又例如，图2所示的方法还可以包括：第一PE102接收第二PE104发送的路由撤消消息。路由撤消消息携带IP地址前缀、VPN信息和第二PE104的IP地址。VPN信息用于标识所述主机路由所属的VPN，举例来说，VPN信息可以是路由目标(route target)。路由撤销消息用于撤消IP地址前缀对应的主机路由。如果第一PE102确定接入通知报文中携带的第一终端设备的IP地址对应路由撤消消息中携带的IP地址前缀，并且接入通知报文的接口所绑定的VPN ID对应路由撤消消息携带的VPN信息所标识的VPN时，获得路由撤消消息中携带的第二PE104的IP地址。
步骤206：第一PE102根据第二PE104的IP地址和接收到接入通知报文的接口所绑定的VPN ID获得第二终端设备108的IP地址。第二终端设备108的IP地址与第一终端设备106的IP地址不同。举例来说，第一PE102可以根据第二PE104的IP地址和接收到接入通知报文的接口所绑定的VPN ID查询表2所示的路由表，获得第二终端设备108的IP地址。
步骤208：第一PE102向第一终端设备106发送绑定更新通知报文。绑定更新通知报文携带第一PE102的MAC地址和第二终端设备108的IP地址。举例来说，第一PE102可以只向第一终端设备106发送绑定更新通知报文。第一PE102也可以在第一site中广播绑定更新通知报文。可选地，绑定更新通知报文为ARP报文，绑定更新通知报文的发送者MAC地址为第一PE102的MAC地址，绑定更新通知报文的发送者IP地址为第二终端设备108的IP地址。或者，绑定更新通知报文为邻居通告消息(NA message)，绑定更新通知报文的源MAC地址为第一PE102的MAC地址，绑定更新通知报文的源IP地址为第二终端设备108的IP地址。
可选地，图2所示的方法还可以包括：第一PE102保存第一终端设备106的MAC地址和第一终端设备106的IP地址的对应关系。
参见图1，第一终端设备106接入第二site时，第一终端设备106存储第二终端设备108的IP地址和第二终端设备108的MAC地址的对应关系。在第一终端设备106从第二site迁移到第一site的情况下，第一终端设备106收到第一PE102发送的绑定更新通知报文后，第一终端设备106更新之前存储的对应关系，换言之，保存第二终端设备108的IP地址和第一PE102的MAC地址的对应关系。
采用本发明实施例中的方案，第一终端设备106从第二site迁移到第一site时，向第一PE102发送接入通知报文。第一PE102接收到接入通知报文，获得第二site中的第二终端设备108的IP地址。第一PE102向第一终端设备106发送绑定更新通知报文。第一终端设 备106根据绑定更新通知报文，存储第一PE102的MAC地址与第二终端设备108的IP地址的对应关系。因此，第一终端设备106从第二site迁移到第一site后，可以使用第一PE102的MAC地址与第二site中的第二终端设备108进行通信，从而有助于解决现有技术中因为终端设备的迁移导致不能通信的问题。
图3为本发明实施例提供的终端设备实现L3VPN的方法流程图。结合图1所示的场景，如图3所示，本发明实施例提供的方法包括下述操作。
302：当第一终端设备106从第二site迁移到第一site时，第一终端设备106向第一PE102发送接入通知报文。接入通知报文携带第一终端设备106的IP地址，接入通知报文用于向第一PE102通知第一终端设备106接入第一site。参见图1，第一site和第二site接入同一L3VPN。第一site通过第一PE102接入L3VPN。
304：第一终端设备106接收第一PE102发送的绑定更新通知报文。绑定更新通知报文携带第一PE102的MAC地址和第二终端设备108的IP地址，第二终端设备108的IP地址与第一终端设备106的IP地址不同。第二终端设备108接入第二site。
306：第一终端设备106存储第一PE102的MAC地址和第二终端设备108的IP地址的对应关系。
图4为本发明实施例提供的网络设备的简化结构框图。如图4所示，本发明实施例提供的网络设备400为第一PE。网络设备400包括发送接收单元402和处理单元404。发送接收单元402用于接收第一终端设备发送的接入通知报文。接入通知报文携带第一终端设备的IP地址。接入通知报文用于向第一PE通知第一终端设备接入第一site。处理单元404用于根据接收到接入通知报文的接口所绑定的VPN ID和第一终端设备的IP地址获得第二PE的IP地址。第二site通过第二PE接入L3VPN。第一终端设备接入第一site之前接入第二site。处理单元404还用于通过根据第二PE的IP地址和接收到接入通知报文的接口所绑定的VPN ID获得第二终端设备的IP地址，第二终端设备的IP地址与第一终端设备的IP地址不同。发送接收单元402还用于向第一终端设备发送绑定更新通知报文。绑定更新通知报文携带第一PE的MAC地址和第二终端设备的IP地址。可选地，图4所示的网络设备还可以包括存储单元，用于存储路由表。处理单元404可以根据第二PE的IP地址和接收到接入通知报文的接口所绑定的VPN ID查询路由表，获得第二终端设备的IP地址。
举例来说，处理单元404可以包括第一确定模块和第二确定模块。第一确定模块用于通过根据第一终端设备的IP地址和接收到接入通知报文的接口所绑定的VPN ID查询 路由表获得第二PE的IP地址。第二确定模块用于通过根据第二PE的IP地址和接收到接入通知报文的接口所绑定的VPN ID查询路由表获得第二终端设备的IP地址。
又举例来说，发送接收单元402还用于接收第二PE发送的路由撤消消息。路由撤消消息携带IP地址前缀、VPN信息和第二PE的IP地址。路由撤销消息用于撤消IP地址前缀对应的主机路由，VPN信息用于标识所述主机路由所属的VPN。处理单元404可以包括第三确定模块和第四确定模块。第三确定模块用于确定接入通知报文中携带的第一终端设备的IP地址是否对应路由撤消消息中携带的IP地址前缀，以及接收接入通知报文的接口所绑定的VPN ID是否对应路由撤销消息中携带的VPN信息所标识的VPN，当接入通知报文中携带的第一终端设备的IP地址对应路由撤消消息中携带的IP地址前缀，并且接收接入通知报文的接口所绑定的VPN ID对应路由撤销消息中携带的VPN信息所标识的VPN时，获得路由撤消消息中携带的第二PE的IP地址。第四确定模块用于通过根据第二PE的IP地址和接收到接入通知报文的接口所绑定的VPN ID查询路由表获得第二终端设备的IP地址。
图5为本发明实施例提供的网络设备的简化硬件结构框图。如图5所示，本发明实施例提供的网络设备500是第一PE。网络设备500包括输入/输出电路502、处理器504和存储器506。输入/输出电路502用于接收第一终端设备发送的接入通知报文。接入通知报文携带第一终端设备的IP地址。接入通知报文用于向第一PE通知第一终端设备接入第一site。处理器504用于根据接收到接入通知报文的接口所绑定的VPN ID和第一终端设备的IP地址获得第二PE的IP地址。第二site通过第二PE接入L3VPN。第一终端设备接入第一site之前接入第二site。处理器504还用于通过根据第二PE的IP地址和接收到接入通知报文的接口所绑定的VPN ID获得第二终端设备的IP地址，第二终端设备的IP地址与第一终端设备的IP地址不同。输入/输出电路502还用于向第一终端设备发送绑定更新通知报文。绑定更新通知报文携带第一PE的MAC地址和第二终端设备的IP地址。存储器506用于存储程序指令，当程序指令被执行时，使得处理器504执行上述操作。举例来说，存储器506可以是只读存储器(read-only memory，简称ROM)、随机存取存储器(random access memory，简称RAM)、磁碟或者光盘等各种可以存储程序代码的介质的一种或者多种。举例来说，程序代码可以是已经安装在网络设备500中的，或者是运行过程中根据需求下载的。又举例来说，存储器506可以包括数据库(database)，存储网络资源信息，例如路由表。
图6为本发明实施例提供的终端设备的简化结构框图。如图6所示，本发明实施例提供的第一终端设备600包括发送接收单元602、处理单元604和存储单元606。发送接收单元602用于向PE发送接入通知报文。接入通知报文携带第一终端设备600的IP地址。接入通知报文用于向PE通知第一终端设备600接入第一site。第一site和第二site接入同一L3VPN。第一site通过PE接入L3VPN。发送接收单元602还用于接收PE发送的绑定更新通知报文。绑定更新通知报文携带PE的MAC地址和第二终端设备的IP地址。第二终端设备的IP地址与第一终端设备的IP地址不同。第二终端设备接入第二site。处理单元604用于触发存储单元606存储PE的MAC地址和第二终端设备的IP地址的对应关系。存储单元606用于存储PE的MAC地址和第二终端设备的IP地址的对应关系。
图7为本发明实施例提供的终端设备的简化硬件结构框图。如图7所示，本发明实施例提供的第一终端设备700包括输入/输出电路702、处理器704和存储器706。输入/输出电路702用于向PE发送接入通知报文。接入通知报文携带第一终端设备700的IP地址。接入通知报文用于向PE通知第一终端设备700接入第一site。第一site和第二site接入同一L3VPN。第一site通过PE接入L3VPN。输入/输出电路702还用于接收PE发送的绑定更新通知报文。绑定更新通知报文携带PE的MAC地址和第二终端设备的IP地址。第二终端设备的IP地址与第一终端设备的IP地址不同。第二终端设备接入第二site。处理器704用于触发存储器706存储PE的MAC地址和第二终端设备的IP地址的对应关系。存储器706用于存储PE的MAC地址和第二终端设备的IP地址的对应关系。存储器706还用于存储程序指令，当程序指令被执行时，使得处理器704执行上述操作。举例来说，存储器706可以是只读存储器(read-only memory，简称ROM)、随机存取存储器(random access memory，简称RAM)、磁碟或者光盘等各种可以存储程序代码的介质的一种或者多种。举例来说，程序代码可以是已经安装在第一终端设备700中的，或者是运行过程中根据需求下载的。
在描述图1-7的方案时，为了简化描述而未在各个实施例中重复描述技术细节。图1-7所示的实施例是相互关联的技术方案，技术细节是相通的，不同实施例之间的技术细节可以相互参考。
最后应说明的是：以上各实施例仅用以说明本发明的技术方案，而非对其限制；尽管参照前述各实施例对本发明进行了详细的说明，本领域的普通技术人员应当理解：其依然可以对前述各实施例所记载的技术方案进行修改，或者对其中部分或者全部技术特征进行等同替换；而这些修改或者替换，并不使相应技术方案的本质脱离本发明各实施 例技术方案的范围。

Claims (16)

  1. 一种网络设备，所述网络设备为第一运营商边缘PE，应用于三层虚拟专用网L3VPN中，第一site通过所述第一PE接入L3VPN，其特征在于，所述第一PE包括发送接收单元和处理单元，
    所述发送接收单元用于接收第一终端设备发送的接入通知报文，所述接入通知报文携带所述第一终端设备的互联网协议IP地址，所述接入通知报文用于向所述第一PE通知所述第一终端设备接入所述第一site；
    所述处理单元用于根据虚拟专用网标识VPN ID和所述第一终端设备的IP地址获得第二PE的IP地址，所述第二site通过所述第二PE接入所述L3VPN，所述第一终端设备接入所述第一site之前接入所述第二site，所述VPN ID标识与接收所述接入通知报文的接口相关联的VPN；
    所述处理单元还用于根据所述VPN ID和所述第二PE的IP地址获得第二终端设备的IP地址，所述第二终端设备的IP地址与所述第一终端设备的IP地址不同，所述第二终端设备接入所述第二site；
    所述发送接收单元还用于向所述第一终端设备发送绑定更新通知报文，所述绑定更新通知报文携带所述第一PE的媒体接入控制MAC地址和所述第二终端设备的IP地址。
  2. 根据权利要求1所述的网络设备，其特征在于，所述处理单元包括：
    第一确定模块，用于通过根据所述VPN ID和所述第一终端设备的IP地址查询路由表获得所述第二PE的IP地址；
    第二确定模块，用于通过根据所述VPN ID和所述第二PE的IP地址查询所述路由表获得所述第二终端设备的IP地址。
  3. 根据权利要求1所述的网络设备，其特征在于，
    所述发送接收单元还用于接收所述第二PE发送的路由撤消消息，所述路由撤消消息携带IP地址前缀、VPN信息和所述第二PE的IP地址，所述路由撤销消息用于撤消所述IP地址前缀对应的主机路由，所述VPN信息用于标识所述主机路由所属的VPN；
    所述处理单元包括：
    第三确定模块，用于确定所述接入通知报文中携带的所述第一终端设备的IP地址是否对应所述路由撤消消息中携带的所述IP地址前缀，以及所述VPN ID是否对应所述VPN信息标识的VPN，当所述接入通知报文中携带的所述第一终端设备的IP地址对应所述路 由撤消消息中携带的所述IP地址前缀，并且所述VPN ID对应所述VPN信息标识的VPN时，获得所述路由撤消消息中携带的所述第二PE的IP地址；
    第四确定模块，用于通过根据所述VPN ID和所述获得的所述第二PE的IP地址查询路由表获得所述第二终端设备的IP地址。
  4. 根据权利要求2或3所述的网络设备，其特征在于，还包括：存储单元，用于存储所述路由表。
  5. 根据权利要求1-4任一所述的网络设备，其特征在于，
    所述绑定更新通知报文为地址解析协议ARP报文，所述绑定更新通知报文的发送者MAC地址为所述第一PE的MAC地址，所述绑定更新通知报文的发送者IP地址为所述第二终端设备的IP地址；
    或者，
    所述绑定更新通知报文为邻居通告消息NA message，所述绑定更新通知报文的源MAC地址为所述第一PE的MAC地址，所述绑定更新通知报文的源IP地址为所述第二终端设备的IP地址。
  6. 根据权利要求1-5任一所述的网络设备，其特征在于，所述接入通知报文为免费ARP报文，所述接入通知报文的发送者IP地址以及目标IP地址均为所述第一终端设备的IP地址，所述接入通知报文的发送者MAC地址为所述第一终端设备的MAC地址，所述接入通知报文的目的MAC地址为广播地址；
    或者，
    所述接入通知报文为非请求邻居通告消息，所述接入通知报文的源IP地址为所述第一终端设备的IP地址，所述接入通知报文的源MAC地址为所述第一终端设备的MAC地址，所述接入通知报文的目的IP地址为所有节点多播地址,所述接入通知报文携带的目标地址是所述第一终端设备的IP地址。
  7. 一种实现三层虚拟专用网L3VPN的方法，其特征在于，包括：
    第一运营商边缘PE接收第一终端设备发送的接入通知报文，所述接入通知报文携带所述第一终端设备的互联网协议IP地址，所述接入通知报文用于向所述第一PE通知所述第一终端设备接入第一site，所述第一site通过所述第一PE接入L3VPN；
    所述第一PE根据虚拟专用网标识VPN ID和所述第一终端设备的IP地址获得第二PE的IP地址，所述第二site通过所述第二PE接入所述L3VPN，所述第一终端设备接入所述 第一site之前接入所述第二site，所述VPN ID标识与接收所述接入通知报文的接口相关联的VPN；
    所述第一PE根据所述VPN ID和所述第二PE的IP地址获得第二终端设备的IP地址，所述第二终端设备的IP地址与所述第一终端设备的IP地址不同，所述第二终端设备接入所述第二Site；
    所述第一PE向所述第一终端设备发送绑定更新通知报文，所述绑定更新通知报文携带所述第一PE的MAC地址和所述第二终端设备的IP地址。
  8. 根据权利要求7所述的方法，其特征在于，
    所述第一PE根据虚拟专用网标识VPN ID和所述第一终端设备的IP地址获得第二PE的IP地址，包括：
    所述第一PE通过根据所述VPN ID和所述第一终端设备的IP地址查
    询路由表获得所述第二PE的IP地址；
    所述第一PE根据所述VPN ID和所述第二PE的IP地址获得第二终端设备的IP地址，包括：
    所述第一PE通过所述VPN ID和所述第二PE的IP地址查询所述路由表获得所述第二终端设备的IP地址。
  9. 根据权利要求7所述的方法，其特征在于，
    所述方法还包括：
    所述第一PE接收所述第二PE发送的路由撤消消息，所述路由撤消消息携带IP地址前缀、VPN信息和所述第二PE的IP地址，所述路由撤销消息用于撤消所述IP地址前缀对应的主机路由，所述VPN信息用于标识所述主机路由所属的VPN；
    所述第一PE根据虚拟专用网标识VPN ID和所述第一终端设备的IP地址获得第二PE的IP地址，包括：
    所述第一PE确定所述接入通知报文中携带的所述第一终端设备的IP地址是否对应所述路由撤消消息中携带的所述IP地址前缀，以及所述VPN ID是否对应所述VPN信息标识的VPN，当所述接入通知报文中携带的所述第一终端设备的IP地址对应所述路由撤消消息中携带的所述IP地址前缀，并且所述VPN ID对应所述VPN信息标识的VPN时，获得所述路由撤消消息中携带的所述第二PE的IP地址；
    所述第一PE根据所述VPN ID和所述第二PE的IP地址获得第二终端设备的IP地址，包括：
    所述第一PE通过所述VPN ID和所述第二PE的IP地址查询路由表获得所述第二终端设备的IP地址。
  10. 根据权利要求7-9任一所述的方法，其特征在于，
    所述绑定更新通知报文为地址解析协议ARP报文，所述绑定更新通知报文的发送者MAC地址为所述第一PE的MAC地址，所述绑定更新通知报文的发送者IP地址为所述第二终端设备的IP地址；
    或者，
    所述绑定更新通知报文为邻居通告消息NA message，所述绑定更新通知报文的源MAC地址为所述第一PE的MAC地址，所述绑定更新通知报文的源IP地址为所述第二终端设备的IP地址。
  11. 根据权利要求7-10任一所述的方法，其特征在于，所述接入通知报文为免费ARP报文，所述接入通知报文的发送者IP地址以及目标IP地址均为所述第一终端设备的IP地址，所述接入通知报文的发送者MAC地址为所述第一终端设备的MAC地址，所述接入通知报文的目的MAC地址为广播broadcast地址；
    或者，
    所述接入通知报文为非请求邻居通告消息unsolicited NA message，所述接入通知报文的源IP地址为所述第一终端设备的IP地址，所述接入通知报文的源MAC地址为所述第一终端设备的MAC地址，所述接入通知报文的目的IP地址为所有节点多播地址,所述接入通知报文携带的目标地址是所述第一终端设备的IP地址。
  12. 根据权利要求7-11任一所述的方法，其特征在于，还包括：
    所述第一PE保存所述第一终端设备的MAC地址和所述第一终端设备的IP地址的对应关系，所述接入通知报文中还携带所述第一终端设备的MAC地址。
  13. 一种设备，所述设备为第一终端设备，其特征在于，包括发送接收单元、处理单元和存储单元；
    所述发送接收单元用于向PE发送接入通知报文，所述接入通知报文携带所述第一终端设备的互联网协议IP地址，所述接入通知报文用于向所述PE通知所述第一终端设备接入第一site，所述第一site和第二site接入同一三层虚拟专用网L3VPN，所述第一site通过所述PE接入所述L3VPN；
    所述发送接收单元还用于接收所述PE发送的绑定更新通知报文，所述绑定更新通知报文携带所述PE的MAC地址和第二终端设备的IP地址，所述第二终端设备的IP地址与所述第一终端设备的IP地址不同，所述第二终端设备接入所述第二site；
    所述处理单元用于触发所述存储单元存储所述PE的MAC地址和所述第二终端设备的IP地址的对应关系；
    所述存储单元用于存储所述PE的MAC地址和所述第二终端设备的IP地址的对应关系。
  14. 根据权利要求13所述的设备，其特征在于，所述接入通知报文为免费ARP报文，所述接入通知报文的发送者IP地址以及目标IP地址均为所述第一终端设备的IP地址，所述接入通知报文的发送者MAC地址为所述第一终端设备的MAC地址，所述接入通知报文的目的MAC地址为广播broadcast地址；
    或者，
    所述接入通知报文为非请求邻居通告消息unsolicited NA message，所述接入通知报文的源IP地址为所述第一终端设备的IP地址，所述接入通知报文的源MAC地址为所述第一终端设备的MAC地址，所述接入通知报文的目的IP地址为所有节点多播地址,所述接入通知报文携带的目标地址是所述第一终端设备的IP地址。
  15. 一种实现三层虚拟专用网L3VPN的方法，其特征在于，包括：
    第一终端设备向PE发送接入通知报文，所述接入通知报文携带所述第一终端设备的互联网协议IP地址，所述接入通知报文用于向所述PE通知所述第一终端设备接入第一site，所述第一site和第二site接入同一三层虚拟专用网L3VPN，所述第一site通过所述PE接入所述L3VPN；
    所述第一终端设备接收所述PE发送的绑定更新通知报文，所述绑定更新通知报文携带所述PE的MAC地址和第二终端设备的IP地址，所述第二终端设备的IP地址与所述第一终端设备的IP地址不同，所述第二终端设备接入所述第二site；
    所述第一终端设备存储所述PE的MAC地址和所述第二终端设备的IP地址的对应关系。
  16. 根据权利要求15所述的方法，其特征在于，所述接入通知报文为免费ARP报文，所述接入通知报文的发送者IP地址以及目标IP地址均为所述第一终端设备的IP地址，所述接入通知报文的发送者MAC地址为所述第一终端设备的MAC地址，所述接入通知报文的目的MAC地址为广播broadcast地址；
    或者，
    所述接入通知报文为非请求邻居通告消息unsolicited NA message，所述接入通知报文中的源IP地址为所述第一终端设备的IP地址，所述接入通知报文的源MAC地址为所述第一终端设备的MAC地址，所述接入通知报文的目的IP地址为所有节点多播地址,所述接入通知报文携带的目标地址是所述第一终端设备的IP地址。
PCT/CN2014/085896 2013-09-23 2014-09-04 实现三层虚拟专用网的方法和设备 WO2015039563A1 (zh)

Priority Applications (2)

Application Number Priority Date Filing Date Title
EP14845726.0A EP3021529B1 (en) 2013-09-23 2014-09-04 Method and device for implementing layer 3 virtual private network
US15/078,422 US10091106B2 (en) 2013-09-23 2016-03-23 Method for implementing layer 3 virtual private network and device

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201310437112.9A CN104468305B (zh) 2013-09-23 2013-09-23 实现三层虚拟专用网方法和设备
CN201310437112.9 2013-09-23

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/078,422 Continuation US10091106B2 (en) 2013-09-23 2016-03-23 Method for implementing layer 3 virtual private network and device

Publications (1)

Publication Number Publication Date
WO2015039563A1 true WO2015039563A1 (zh) 2015-03-26

Family

ID=52688223

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2014/085896 WO2015039563A1 (zh) 2013-09-23 2014-09-04 实现三层虚拟专用网的方法和设备

Country Status (4)

Country Link
US (1) US10091106B2 (zh)
EP (1) EP3021529B1 (zh)
CN (1) CN104468305B (zh)
WO (1) WO2015039563A1 (zh)

Families Citing this family (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102664948B (zh) * 2012-04-18 2015-05-27 杭州海康威视数字技术股份有限公司 一种跨网关数据存储的系统及方法
US11171861B2 (en) * 2019-12-23 2021-11-09 Arista Networks, Inc. Fast failover and recovery for overlay networks

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101552727A (zh) * 2009-05-12 2009-10-07 杭州华三通信技术有限公司 一种报文发送和接收方法及运营商边缘路由器
CN101616082A (zh) * 2009-07-29 2009-12-30 杭州华三通信技术有限公司 一种虚拟专用局域网服务网络中报文处理的方法及设备
CN102449964A (zh) * 2011-07-22 2012-05-09 华为技术有限公司 一种三层虚拟专有网路由控制方法、装置及系统

Family Cites Families (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20050190757A1 (en) * 2004-02-27 2005-09-01 Cisco Technology Inc. Interworking between Ethernet and non-Ethernet customer sites for VPLS
WO2006103805A1 (ja) * 2005-03-25 2006-10-05 Nec Corporation 移動通信システム、エッジルータおよびそれらに用いる移動管理方法並びにプログラムと記録媒体
US8006282B2 (en) * 2006-08-29 2011-08-23 Cisco Technology, Inc. Method and system for tracking a user in a network
CN101072238A (zh) * 2007-07-09 2007-11-14 中兴通讯股份有限公司 在mpls三层虚拟专用网中实现同一子网通信的方法
CN101827023B (zh) * 2010-03-25 2013-01-16 杭州华三通信技术有限公司 一种数据处理方法和设备
CN101848161A (zh) * 2010-05-31 2010-09-29 杭州华三通信技术有限公司 一种mpls l2vpn和mpls l3vpn的通信方法和设备
US8675488B1 (en) * 2010-09-07 2014-03-18 Juniper Networks, Inc. Subscriber-based network traffic management
JP5398787B2 (ja) * 2011-06-22 2014-01-29 アラクサラネットワークス株式会社 仮想ネットワーク接続方法、ネットワークシステム及び装置
US8717934B2 (en) * 2011-10-25 2014-05-06 Cisco Technology, Inc. Multicast source move detection for layer-2 interconnect solutions

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101552727A (zh) * 2009-05-12 2009-10-07 杭州华三通信技术有限公司 一种报文发送和接收方法及运营商边缘路由器
CN101616082A (zh) * 2009-07-29 2009-12-30 杭州华三通信技术有限公司 一种虚拟专用局域网服务网络中报文处理的方法及设备
CN102449964A (zh) * 2011-07-22 2012-05-09 华为技术有限公司 一种三层虚拟专有网路由控制方法、装置及系统

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3021529A4 *

Also Published As

Publication number Publication date
EP3021529A1 (en) 2016-05-18
EP3021529B1 (en) 2017-11-08
CN104468305B (zh) 2018-02-06
US10091106B2 (en) 2018-10-02
EP3021529A4 (en) 2016-07-20
CN104468305A (zh) 2015-03-25
US20160205020A1 (en) 2016-07-14

Similar Documents

Publication Publication Date Title
US20180287990A1 (en) Layer 3 convergence for evpn link failure
US7649866B2 (en) Method of subnet roaming within a network
US9467376B2 (en) Method and device for sending internet protocol packets
US9699136B2 (en) Stateless autoconfiguration of hostnames of network devices
WO2018214809A1 (zh) 消息发送方法及装置、存储介质
CN106572021B (zh) 一种实现网络虚拟化叠加的方法与网络虚拟化边缘节点
WO2012156852A1 (en) Label switched routing to connect low power network domains
CN105791457A (zh) 一种数据处理方法及装置
WO2011069399A1 (zh) 地址映射方法及接入业务节点
US8988985B2 (en) Internetworking and IP address management in unified MPLS and IP networks
US20140032782A1 (en) Method and apparatus for route selection of host in multihoming site
US11757776B2 (en) Dynamic segment routing mapping server for a multiprotocol label switching network
CN108206783A (zh) 一种软件定义网络系统中地址配置方法及其装置
WO2015039563A1 (zh) 实现三层虚拟专用网的方法和设备
CN110620715B (zh) 虚拟扩展局域网通信方法、隧道端点和控制器
US12063153B2 (en) Method and apparatus for implementing multicast
Park et al. DNS configuration in IPv6: approaches, analysis, and deployment scenarios
CN106452992B (zh) 一种远端多归属组网的实现方法及装置
US11729280B2 (en) Zero day zero touch providing of services with policy control
US11706185B2 (en) Address resolution protocol (ARP) response to ARP requests
CN108512762B (zh) 一种组播实现方法及装置
CN108322400A (zh) 报文处理方法、系统及路由设备
Levis Network Working Group M. Boucadair Internet-Draft France Telecom Intended status: Informational J. Touch Expires: March 5, 2012 USC/ISI

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14845726

Country of ref document: EP

Kind code of ref document: A1

REEP Request for entry into the european phase

Ref document number: 2014845726

Country of ref document: EP

WWE Wipo information: entry into national phase

Ref document number: 2014845726

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE