WO2015196676A1

WO2015196676A1 - Networking protection method and device, and main convergence network element in networking

Info

Publication number: WO2015196676A1
Application number: PCT/CN2014/089502
Authority: WO
Inventors: 李瑛瑾
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-06-24
Filing date: 2014-10-24
Publication date: 2015-12-30
Also published as: CN105306330A

Abstract

A networking protection method and device, and a main convergence network element in networking. The networking comprises a first network layer, a second network layer and a convergence layer located between the first network layer and the second network layer. The method comprises: detecting whether a main link of one network layer of a main link of a first network layer and a main link of a second network layer and a convergence link fail simultaneously, if so, triggering a network element in a network layer, the main link of which has not failed to switch from the main link in the network layer which has not failed to a standby link, thereby realizing linkage protection for networking and avoiding the interruption of a service flow.

Description

Network protection method, device and aggregation primary network element in networking

Technical field

The present invention relates to the field of communications, and in particular, to a networking protection method and apparatus, and a convergence primary network element in a networking.

Background technique

The current MPLS-TP (Multi-Protocol Label Switching-Transport Profile)-based LTE (Long Term Evolution) solution uses L2VPN (Layer 2 Virtual Private Network, Layer 2 Virtual Private Network) +L3VPN (Layer Three Virtual Private Network) networking, that is, the network access layer still adopts the line (linear) networking technology, and the access layer is terminated at the aggregation layer. The Line service completes the bridging of L2VPN to L3VPN inside the aggregation node, and enters the L3VPN process to forward to the core layer of the network. In terms of end-to-end network protection, MPLS-TP provides powerful and rich OAM alarm detection methods for this type of networking, supports multiple carrier-class protection modes, and has mature carrier-class protection capabilities, providing 50ms protection switching capability. . MPLS-TP linear protection or ring network protection and pseudo-wire dual-homing protection are implemented in the L2VPN network. VRRP (Virtual Router Redundancy Protocol), MPLS-TP linear protection or ring network is adopted in the L3VPN network. It is implemented in conjunction with L3VPN FRR (Fast ReRoute). However, the current protection scheme still has a defect. The defect is that the protection of the L2VPN network and the L3VPN network is not linked, and the service flow interruption occurs in the following two situations:

When the L3VPN FRR switching occurs due to a network link failure on the L3VPN network, the link between the active node and the standby node in the aggregation layer is also faulty; the service flow from the core layer to the access layer is switched to convergence. On the standby node of the layer, the access layer to the core layer is in the other direction. However, because the working path of the L2VPN network is still normal, there will be no pseudo-line double-switching, so the service flow from the access layer to the core layer is in the L2VPN network part. Still walking on the working path, in fact, the active node of the aggregation layer has been isolated from the L3VPN network, resulting in the traffic flow from the access layer to the core layer. Broken

2. When the pseudo-line dual-homed protection switching caused by the network link failure occurs in the L2VPN network, the link between the active node and the standby node in the aggregation layer also fails; the service flow from the access layer to the core layer Switching to the standby node of the aggregation layer, the core layer to the access layer in another direction, but because the working path of the L3VPN network is still normal, there will be no FRR switching, so the traffic from the core layer to the access layer is in the L3VPN network part. Still walking on the working path, in fact, the primary network element of the aggregation layer has been isolated from the L2VPN network, and the traffic flow from the core layer to the access layer is also interrupted.

Summary of the invention

The embodiment of the invention provides a network protection method and device, and an aggregation main network element in the networking, which solves the problem that the service flow is interrupted due to the failure of the linkage protection in the existing networking.

A networking protection method, where the networking includes a first network layer and a second network layer, where the first network element and the second network element of the first network layer and the second network layer are respectively located, and the first network layer is located at the first network layer. The aggregation primary network element and the aggregation standby network element at the convergence of the second network layer; the link connecting the first network element and the aggregation primary network element is the primary link of the first network layer; the second network element and convergence The link connected to the primary network element is the primary link of the second network layer; the link connecting the first network element and the aggregation standby network element is the standby link of the first network layer; the second network element and the aggregation standby network The link of the meta-connection is a backup link of the second network layer; the link that aggregates the connection between the primary network element and the aggregation standby network element is an aggregation link; the method includes:

Detecting whether the primary link of the first network layer and the primary link of the network layer of the second network layer and the aggregation link are simultaneously faulty, and if so, triggering the primary link The network element in the network layer that has not failed switches from the primary link in the non-failed network layer to the standby link.

In an embodiment of the invention, when the faulty primary link and/or the aggregation link fault is eliminated, the network element in the network layer that triggers the primary link not failing from the failure does not fail. The alternate link in the network layer is switched back to the primary link.

In an embodiment of the invention, detecting whether the primary link and the second of the first network layer The simultaneous failure of one of the primary links of the network layer and the aggregation link includes:

Detecting whether the status detection message sent by the network element in one of the first network layer and the second network layer can be received normally; if yes, the primary link in the other network layer The aggregation link fails at the same time.

In an embodiment of the invention, the switching of the network element in the network layer that does not fail to trigger the primary link from the primary link in the unfailed network layer to the backup link includes:

The aggregation primary network element is triggered to stop the normal feedback state detection packet of the network element in the network layer that has not failed, so that the network element determines that the primary link is faulty and switches to the standby link.

Or directly transmitting an instruction to switch to the standby link to the network element in the non-failed network layer, so that the network element switches from the primary link in the unfailed network layer to the standby link.

In an embodiment of the invention, the recovering the network element in the network layer that has not failed the primary link from the backup link in the non-failed network layer back to the active link includes:

The aggregation primary network element is triggered to re-feed the status detection packet to the network element in the unfailed network layer, so that the network element determines that the primary link fault is eliminated and switches to the standby link.

Or directly transmitting an instruction to switch to the primary link to the network element in the unfailed network layer, so that the network element is switched from the standby link in the unfailed network layer to the primary link. .

In an embodiment of the invention, the first network layer is a layer 3 virtual private network layer, the first network element is a core layer network element, and the second network layer is a layer 2 virtual private network layer. The second network element is an access layer network element.

In order to solve the above problem, the embodiment of the present invention further provides a network protection device, where the networking includes a first network layer and a second network layer, and the first network element is located at the first network layer and the second network layer. a second network element, and an aggregation primary network element and an aggregation standby network element located at the convergence of the first network layer and the second network layer; the link connecting the first network element and the aggregation primary network element is the first network layer The primary link is the primary link of the second network layer; the link connecting the first network element and the aggregation standby network element is the first network layer. a backup link; the link connecting the second network element and the aggregation standby network element is a backup link of the second network layer; the link connecting the connection between the primary network element and the aggregation standby network element is an aggregation link; The device includes a fault detection module and a first link switching module:

The fault detection module is configured to: whether the primary link of the first network layer and the primary link of the network layer of the second network layer and the aggregation link are simultaneously faulty, If yes, notify the first link switching module;

The first link switching module is configured to: switch, according to the notification, a network element in a network layer that has not failed the primary link from the primary link in the unfailed network layer to the standby link on.

In an embodiment of the invention, the second link switching module is further configured to: trigger the primary link to fail when the failed primary link and/or the aggregation link fault is eliminated. The network elements in the network layer are switched back to the primary link from the alternate link in the unfailed network layer.

In an embodiment of the invention, the fault detection module includes a message detection sub-module configured to detect whether the network layer in the first network layer and the second network layer can only be normally received. The status detection message sent by the network element; if yes, it is determined that the primary link in the other network layer and the aggregation link are simultaneously faulty.

In an embodiment of the invention, the first link switching module includes a first triggering submodule, configured to: trigger the aggregation primary network element to stop to the network element in the unfailed network layer The normal feedback state detection packet causes the network element to determine that the primary link is faulty and switches to the standby link.

Or including a first instruction sending sub-module, configured to: directly send an instruction to switch to the standby link to the network element in the unfailed network layer, so that the network element is from the unfailed network layer The primary link in the switch is switched to the standby link.

In an embodiment of the invention, the second link switching module includes a second triggering submodule, configured to: trigger the aggregation primary network element to re-enter the network element in the unfailed network layer The normal feedback state detection packet is configured to enable the unfailed network element to determine that the primary link fault is eliminated and switch to the standby link.

Or including a second instruction sending submodule, configured to: directly send an instruction to switch to the active link to the network element in the unfailed network layer, so that the network element is from the unfailed network The alternate link in the layer switches to the primary link.

In order to solve the above problem, the embodiment of the present invention further provides a convergence primary network element in a networking, where the networking further includes a first network layer, a second network layer, and an aggregation standby network element, respectively located in the first network. The first network element and the second network element of the layer and the second network layer, the convergence primary network element and the aggregation standby network element are located at the convergence of the first network layer and the second network layer; the first network element and the aggregation primary network element The connected link is the primary link of the first network layer; the link connecting the second network element and the aggregation primary network element is the primary link of the second network layer; the first network element is connected to the aggregation standby network element. The link is a backup link of the first network layer; the link connecting the second network element and the aggregation standby network element is a backup link of the second network layer; and the connection between the aggregation primary network element and the aggregation standby network element The link is an aggregation link; the aggregate primary network element includes a memory and a processor; the memory is configured to store instructions; the processor is configured to invoke the instructions to perform the following steps:

Detecting whether the primary link of the one of the first network layer and the second network layer and the aggregation link are simultaneously faulty, and if so, triggering the network element in the network layer where the primary link has not failed Switching from the primary link in the unfailed network layer to the alternate link.

Embodiments of the present invention also provide a computer program comprising program instructions that, when executed by a computer, cause the computer to perform the above method.

Embodiments of the present invention also provide a computer readable storage medium carrying the computer program.

The embodiment of the present invention provides a networking protection method, a device, and an aggregation primary network element in a networking, where the networking includes a first network layer and a second network layer, which are respectively located at the first network layer and the second network layer. The network element, the second network element, and the aggregation primary network element and the aggregation standby network element located at the convergence of the first network layer and the second network layer; the link connecting the first network element and the aggregation primary network element is the first The primary link of the network layer; the link connecting the second network element and the aggregation primary network element is the primary link of the second network layer; the link connecting the first network element and the aggregation standby network element is the first network. a backup link of the layer; the link connecting the second network element and the aggregation standby network element is a backup link of the second network layer; the link connecting the connection between the primary network element and the aggregation standby network element is an aggregation link. When detecting that both the primary link and the aggregation link of one of the two network layers fail simultaneously, triggering another network in which the primary link has not failed The network element in the layer is switched from the active link in the network layer to the standby link to implement the linkage protection of the network to avoid service flow interruption.

BRIEF abstract

1 is a schematic structural diagram of a networking provided in Embodiment 1 of the present invention;

2 is a schematic flowchart 1 of a network protection method according to Embodiment 1 of the present invention;

3 is a second schematic flowchart of a network protection method according to Embodiment 1 of the present invention;

4 is a schematic structural diagram of a network protection device according to Embodiment 2 of the present invention;

FIG. 5 is a schematic structural diagram of an L3VPN+L2VPN networking provided in Embodiment 3 of the present invention;

FIG. 6 is a schematic diagram of four state transitions provided in Embodiment 3 of the present invention; FIG.

FIG. 7 is a schematic diagram of a link fault of an L3VPN network provided in Embodiment 3 of the present invention; FIG.

FIG. 8 is a schematic diagram of L3VPN network link elimination according to Embodiment 3 of the present invention; FIG.

9 is a schematic diagram of a link failure of an L2VPN network provided in Embodiment 3 of the present invention;

FIG. 10 is a schematic diagram of L2VPN network link elimination according to Embodiment 3 of the present invention; FIG.

FIG. 11 is a schematic diagram of a link failure of an L2VPN network and an L3VPN network according to Embodiment 3 of the present invention.

Preferred embodiment of the invention

The specific embodiments of the present invention are described in detail below with reference to the accompanying drawings. The features of the embodiments of the present invention and the embodiments may be arbitrarily combined with each other without conflict.

Embodiment 1:

Referring to FIG. 1 , the networking in this embodiment includes a first network layer and a second network layer, where the first network element and the second network element of the first network layer and the second network layer are respectively located at the first network element and the second network element. a convergence primary network element and a convergence standby network element at a network layer and a second network layer convergence; the link connecting the first network element and the aggregation primary network element is a primary link of the first network layer; the second network The link connecting the element to the aggregation primary network element is the primary link of the second network layer; the link connecting the first network element and the aggregation standby network element is the standby link of the first network layer; the second network element and The link connecting the standby network element is the second network layer. The backup link is a convergence link that aggregates the connection between the primary NE and the aggregation standby NE. Normally, the first network element and the second network element work on the primary link of the network layer to which the respective network element belongs, and the primary network element is used to implement transparent transmission of related information; when the first network element and the second network element are After the primary link of the network layer of the network layer fails, it will switch to the standby link of the network layer. After the faulty primary link fault is removed, the backup link is switched back to the active link.

Referring to FIG. 2, the networking protection method in this embodiment includes:

Step 201: Detect whether the primary link of one of the two network layers and the aggregation link are faulty at the same time, if yes, go to step 202; if not, continue to detect;

Step 202: The network element in the network layer that triggers the failure of the primary link to fail is switched from the primary link in the unfailed network layer to the standby link.

For example, when it is detected that the primary link in the first network layer and the aggregation link fail simultaneously, the first network element in the first network layer switches to the standby link in the first network layer; The second network element in the second network layer that needs to trigger the failure of the primary link to be switched to the standby link in the second network layer; otherwise, the service flow in the second network layer reaches the convergence primary network element. An interruption will occur. By this linkage switching, the above situation can be avoided. On the other hand, when the primary link and the aggregation link in the second network fail simultaneously, and the primary link in the first network does not fail, the process of the coordinated handover is similar to the above process.

Referring to FIG. 3, the network protection method in this embodiment is based on the method shown in FIG. 2, and further includes:

Step 203: Detect whether the failure of the primary link and/or the aggregation link failure occurs, and if yes, go to step 204; if not, continue to detect;

Step 204: The network element in the network layer that triggers the failure of the primary link to fail is switched back to the primary link from the backup link in the network layer that has never failed.

For example, when the primary link fault in the first faulty network layer is eliminated, the first network element in the first network layer is switched back to the primary link; the second network layer is triggered. The second network element also switches back to the primary link from the alternate link in the network layer. For example, the failure of the primary link in the first network layer that fails is not eliminated, but the fault of the aggregation link is eliminated. In this case, the aggregation primary network element can implement the first network element by using the standby network element. Transparent transmission of messages between the second network element, therefore At this time, the second network element in the second network layer is triggered to also switch back from the backup link in the network layer to the primary link; when the primary link and the aggregation link in the first network layer that fails above When the fault is eliminated, the handover process is the same as the handover process of the above-mentioned active link fault elimination, and will not be described here.

In this embodiment, detecting whether the primary link and the aggregation link of one of the two network layers simultaneously fail include:

It is detected whether the status detection message sent by the network element in one of the two network layers can be received normally; if yes, the primary link and the aggregation link in the other network layer are simultaneously faulty.

For example, in FIG. 1, the aggregation primary network element receives only the state detection packet sent by the first network element, and does not receive the state detection packet sent by the second network element, indicating that the primary network layer is the master. A fault occurs at the same time as the aggregation link between the aggregation primary network element and the aggregation standby network element, if the primary link in the second network layer and the convergence between the aggregation primary network element and the aggregation standby network element The link does not fail at the same time. The aggregation master NE can receive the status check packet sent by the second NE. It should be noted that different network layers in this embodiment may adopt different state detection mechanisms, and corresponding state detection messages may also adopt different forms.

In this embodiment, the switching of the network element in the network layer that triggers the failure of the primary link to the backup link from the active link in the network layer that has not failed includes:

The triggering aggregation primary network element stops the normal feedback state detection packet to the network element in the network layer, so that the network element determines that the primary link is faulty and switches to the standby link.

Or directly send an instruction to switch to the standby link to the network element in the network layer, so that the network element is switched from the primary link to the standby link.

In this embodiment, the network element in the network layer that triggers the failure of the primary link to be switched from the backup link in the unfailed network layer back to the active link includes:

The triggering aggregation primary network element returns a status detection packet to the network element in the network layer, so that the network element determines that the primary link fault is eliminated and switches to the standby link.

Or directly transmitting an instruction to switch to the primary link to the network element in the unfailed network layer, so that the network element switches from the standby link in the unfailed network layer to the primary link.

The first network layer in this embodiment may be a three-layer virtual private network layer (L3VPN, Layer). The first network element is a core layer network element; the second network layer is a Layer 2 Virtual Private Network (L2VPN) network, and the second network element is an access layer network element.

Embodiment 2:

The network provided in this embodiment is the same as that shown in FIG. 1 . This embodiment further provides a network protection device. As shown in FIG. 4 , the fault detection module and the first link switching module are included:

The fault detection module is configured to: detect whether the primary link of the network layer and the aggregation link of the two network layers are faulty at the same time, and if yes, notify the first link switching module; in this embodiment, the fault detection module includes The message detection sub-module is configured to: detect whether the state detection message sent by the network element in one of the two network layers can be received normally; if yes, determine the master in another network layer A failure occurs simultaneously with the link and the aggregation link.

The first link switching module is configured to: switch, according to the notification, the network element in another network layer that has not failed the primary link from the primary link in the network layer to the standby link. In this embodiment, the first link switching module includes a first triggering sub-module, and is configured to: trigger the aggregation main network element to stop the normal feedback state detection packet of the network element in the network layer that has not failed, and make the network element It is judged that the primary link is faulty and is switched to the standby link. Or the first command is sent to the sub-module, and is configured to: directly send an instruction to switch to the standby link to the network element in the unfailed network layer, so that the network element is switched from the primary link to the standby link. .

The network protection device further includes a second link switching module, configured to: when the faulty primary link and/or the aggregation link fault is eliminated, trigger the network element in the network layer where the primary link has not failed. The alternate link in the network layer is switched back to the primary link.

In this embodiment, the second link switching module includes a second triggering sub-module, which is configured to: trigger the aggregation primary network element to re-feed the status detection packet to the network element in the network layer that has not failed, and make the network element Determining that the primary link failure is eliminated and switching to the standby link;

Or including the second instruction sending submodule, configured to: directly send an instruction to switch to the primary link to the network element in the unfailed network layer, so that the network element switches from the standby link in the network layer. Go to the main link.

The networking protection device in this embodiment may be a convergence primary network element in the networking, or may be a third-party device other than the networking.

The first network layer in this embodiment may be a Layer 3 Virtual Private Network (L3VPN), the first network element is a core layer network element, and the second network layer is a Layer 2 virtual private network layer (L2VPN). , Layer 2 Virtual Private Network), the second network element is an access layer network element.

Embodiment 3:

The embodiment provides a convergence primary network element in the networking shown in FIG. 1. The aggregation primary network element includes a memory and a processor; the memory is configured to store instructions; and the processor is configured to invoke the instruction to execute the first embodiment. The steps shown. The first network layer is a Layer 3 virtual private network layer (L3VPN, Layer 3 Virtual Private Network), and the first network element is a core layer network element; the second network layer is a layer 2 virtual private network layer, that is, (L2VPN, Layer 2 Virtual Private Network is used for networking. The second NE is an access layer NE. For details, see Figure 5. In the L3VPN, the L3VPN FRR (Fast ReRoute) implements the link switchover, and the corresponding state detection packet is a BFD (Bidirectional Forwarding Detection) message; The link protection is implemented by the protection, and the corresponding status detection message is a CCM (Continuity Check Message) message. For the sake of description, the BFD packet and the CCM packet are collectively referred to as OAM packets. In addition, the detection of the status message in the L3VPN in the embodiment may be implemented by the L3VPN control module set on the aggregation primary network element, and the detection of the status message in the L2VPN may be performed by the aggregation of the L2VPN control module set on the primary network element. achieve. The networking shown in Figure 5 has the following four states:

In the state 1, the L3VPN control module and the L2VPN module on the aggregation primary network element both release the OAM packets sent to the corresponding core network element and the access network element, and the detection can receive the core network element and the access network element. OAM packets have no alarms at the same time;

In the state 2-1, the L3VPN control module releases the local OAM packet, and detects that the OAM packet sent by the core NE is not received. The OAM reports the alarm. The L2VPN module blocks the local OAM packet and can detect the access NE OAM. The message is reported on the OAM.

In the state 2-2, the L2VPN control module releases the local OAM packet, detects that the access network element OAM packet is not received, and reports the alarm on the OAM; the L3VPN module blocks the local OAM packet and can detect the core network element OAM packet. , OAM reported the police.

In the state 3, the L3VPN control module and the L2VPN control module both release the local OAM packets, and the OAM packets sent by the core NE and the access NE are not detected, and the alarm is reported on the OAM.

The transition process of the above four states is shown in Figure 6, as follows:

In state 1, when the L3VPN control module detects that the core network element OAM packet is not received, the OAM reports the alarm and enters the state 2-1; when the L2VPN control module does not detect the access network element OAM packet, the OAM reports the alarm. Enter state 2-1 to enter state 2-2.

In state 2-1, when the L3VPN control module detects that it can receive the core network element OAM packet, and the OAM alarm disappears, it enters state 1. When the L2VPN control module detects that the access network element OAM packet is not detected, the OAM reports the alarm and enters. State 3.

In state 2-2, when the L2VPN control module detects that the access network element OAM packet is received, and the OAM alarm disappears into state 1; when the L3VPN control module does not detect the core network element OAM packet, the OAM reports the alarm and enters State 3.

In state 3, when the L2VPN control module detects that it can receive the peer OAM packet, it enters state 2-1. When the L3VPN control module detects that it can receive the peer OAM packet, it enters state 2-2.

The method for associating L2VPN and L3VPN networking protection in this embodiment includes the following steps:

In the first step, the aggregation primary network element monitors the OAM status of the L2VPN network and the L3VPN network of the aggregation layer primary network element in the protection network bridged by the MPLS-TP-based L2VPN and the L3VPN service.

In the second step, the aggregation primary network element detects that the local end does not receive the OAM packet of the neighboring network, and when the OAM alarm is reported, the OAM packet is sent to another neighboring network by the local network element to reach the L2VPN network. The purpose of L3VPN network linkage.

The second step in this embodiment may include:

When the L3VPN network is in the state of 2-1, the L3VPN network detects that the OAM packet is not received. When the L3VPN reports the OAM alarm, the L2VPN network that blocks the NE sends the OAM packet to the access layer NE. Therefore, the access network element OAM detects the primary path failure, and the service Switch to the alternate path to complete the linkage between the L3VPN network and the L2VPN.

When the L2VPN network is in the state 2-2, the local L3VPN network detects that the OAM packet is not received. When the L3VPN reports the OAM alarm, the local L3VPN network is blocked from sending OAM packets to the core NE. The access layer network element OAM detects that the primary path is faulty, and the service is switched to the alternate path, thereby completing the linkage between the L2VPN network and the L3VPN.

When the L3VPN network and the L3VPN network are faulty in the above state 3, the OAMs of the two networks cannot receive OAM packets from the neighboring network, and all the OAM alarms are reported. This does not block OAM packets.

In the third step, the aggregation primary network element detects that the local network element OAM can receive the OAM message of the neighboring network, and the OAM alarm disappears, and the OAM packet is blocked from being deleted, so that the service is restored from the backup path to the primary service. path.

The third step in this embodiment may include:

When the OAM alarm of the L3VPN network is lost, and the OAM packet of the peer is received, the OAM packet of the L2VPN network is blocked. The access layer NE service is restored from the backup path to the active path.

When the OAM alarm of the L2VPN network is lost, and the OAM packet of the peer is received, the OAM packet of the L3VPN network is blocked. The access layer NE service is restored from the backup path to the active path.

The protection method when the above failure occurs will be described in detail below with reference to the accompanying drawings.

See Figure 7-8, which shows the L3VPN network link failure.

As shown in Figure 7, when the two

links

1 and 2 fail, the core layer network element FRR protects the primary path from being detected and is switched to the alternate path. The aggregation layer L3VPN module detects that the core is not received. If the BFD status of the BFD packet is down, the CFD packet is sent to the aggregation network element to block the CCM message of the L2VPN network. The access network element does not receive the CCM message from the aggregation network element. The LOC alarm is reported, and the pseudowire dual-homing protection is switched to the alternate path, so that the L3VPN and the L2VPN network complete the switching linkage.

As shown in FIG. 8, when one or both of the

links

1 and 2 are restored to normal (the description of both of them is illustrated in FIG. 8), the core network element FRR detects that the primary path alarm disappears, and the main use The path recovery is available, and the FRR is restored to the active path. At the same time, the L3VPN module detects that the L3VPN network can receive the BFD packets at the core layer, the BFD state is Up, and the alarm disappears. The aggregation of the primary network is triggered. The element is blocked from blocking the OAM CCM packet of the L2VPN network. Then, the access layer NE detection can receive the CCM message of the primary network element of the aggregation layer, the LOC alarm disappears, the primary path is available, and the pseudowire dual-homing protection is restored to the primary. Use the path to complete the recovery linkage between the L3VPN and the L2VPN network.

See Figure 9-10, which shows the L3VPN network link failure.

As shown in Figure 9, when the two

links

3 and 2 are faulty, the access network element pseudowire dual-homing protection detects the primary path fault and switches to the alternate path. At the same time, the aggregation layer primary network element, L2VPN control The module detects that the CMC packet of the access layer network element is not received, and reports the LOC alarm, which triggers the aggregation of the primary network element to block the BFD packet of the L3VPN network. Therefore, the core layer network element does not receive the aggregation layer main network element. In the BFD session, the BFD status is down, and the FRR protection is triggered to switch to the alternate path, so that the L2VPN and the L3VPN network complete the switching linkage.

As shown in FIG. 10, in the present embodiment, when one or both of the

links

3 and 2 are restored to normal, FIG. 10 is illustrated by taking both of them as examples. The access layer network element detects the primary path. The alarm disappears, the active path is restored, and the pseudowire is restored to the primary path. At the same time, the L2VPN module detects that the L2VPN network can receive the access layer pseudowire CCM packet, LOC. The alarm disappears, triggering the aggregation of the primary NE to unblock the BFD packets on the L3VPN network. The core NEs can receive the BFD packets from the aggregation layer. The BFD state is Up and the primary path is available. The FRR protection is restored. Go to the main path, so that the L2VPN and L3VPN networks complete the recovery linkage.

As shown in Figure 11, the figure shows that both the L3VPN network and the L2VPN network have link faults. In this case, the aggregation of the primary NEs becomes an island.

As shown in Figure 11, when the three

links

1, 2, and 3 are faulty, the L2VPN control module of the aggregation layer detects that the CCM packet of the access network element is not received, and the LOC alarm is reported, and the L3VPN control is performed. The module detects that the BFD packet of the core NE is not received, and the BFD state is down. In this case, the L2VPN control module and the L3VPN control module do not block the CCM packet and the BFD packet. At this point, link recovery will have the following conditions:

The first case: When the link of 1 is restored to normal, the network state becomes the state shown in Fig. 9, and the process shown in Fig. 9 is performed.

The second case: When the link of 3 is restored to normal, the network state becomes the state shown in FIG. 7, and the process shown in FIG. 7 is performed.

The embodiment of the present invention solves the problem that the related technology causes a non-node failure in the aggregation layer main network element and the L3VPN (or L2VPN) network isolation, which may cause a one-way service interruption problem, and the linkage between the L2VPN network and the L3VPN network is protected. , greatly improving the reliability of the network.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve. Thus, the invention is not limited to any specific combination of hardware and software.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

When each device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Variations or substitutions are readily conceivable within the scope of the present invention by those skilled in the art and are within the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Industrial applicability

The embodiment of the invention can implement linkage protection of the networking to avoid interruption of service flow.

Claims

A networking protection method, where the networking includes a first network layer and a second network layer, where the first network element and the second network element of the first network layer and the second network layer are respectively located, and the first network layer is located at the first network layer. The aggregation primary network element and the aggregation standby network element at the convergence of the second network layer; the link connecting the first network element and the aggregation primary network element is the primary link of the first network layer; The link connecting the second network element to the aggregation primary network element is the primary link of the second network layer; the link connecting the first network element and the aggregation standby network element is the first network layer a backup link; the link connecting the second network element to the aggregation standby network element is a backup link of the second network layer; and the connection between the aggregation primary network element and the aggregation standby network element The link is an aggregation link; the method includes:

Detecting whether the primary link of the first network layer and the primary link of the network layer of the second network layer and the aggregation link are simultaneously faulty, and if so, triggering the primary link The network element in the network layer that has not failed switches from the primary link in the non-failed network layer to the standby link.
The network protection method according to claim 1, wherein when the faulty primary link and/or the aggregation link fault is eliminated, the network element in the network layer that triggers the failure of the primary link is triggered. The alternate link in the unfailed network layer is switched back to the primary link.
The networking protection method according to claim 2, wherein detecting whether one of the primary link of the first network layer and the primary link of the second network layer and the aggregation link are simultaneously faulty includes :

Detecting whether the status detection message sent by the network element in one of the first network layer and the second network layer can be received normally; if yes, the primary link in the other network layer The aggregation link fails at the same time.
The networking protection method according to claim 3, wherein the network element in the network layer that triggers the failure of the primary link to fail is switched from the primary link in the unfailed network layer to the backup link. The road includes:

The aggregation primary network element is triggered to stop the normal feedback state detection packet of the network element in the network layer that has not failed, so that the network element determines that the primary link is faulty and switches to the standby link.

Or directly transmitting an instruction to switch to the standby link to the network element in the non-failed network layer, so that the network element switches from the primary link in the unfailed network layer to the standby link.
The network protection method according to claim 4, wherein the network element in the network layer that triggers the failure of the primary link to fail is switched back to the primary chain from the backup link in the unfailed network layer. The road includes:

The aggregation primary network element is triggered to re-feed the status detection packet to the network element in the unfailed network layer, so that the network element determines that the primary link fault is eliminated and switches to the standby link.

Or directly transmitting an instruction to switch to the primary link to the network element in the unfailed network layer, so that the network element is switched from the standby link in the unfailed network layer to the primary link. .
The networking protection method according to any one of claims 1-5, wherein the first network layer is a three-layer virtual private network layer, the first network element is a core layer network element, and the second network is The layer is a layer 2 virtual private network layer, and the second network element is an access layer network element.
A networking protection device, where the networking includes a first network layer and a second network layer, where the first network element and the second network element of the first network layer and the second network layer are respectively located, and the first network layer is located at the first network layer. The aggregation primary network element and the aggregation standby network element at the convergence of the second network layer; the link connecting the first network element and the aggregation primary network element is the primary link of the first network layer; The link connecting the second network element to the aggregation primary network element is the primary link of the second network layer; the link connecting the first network element and the aggregation standby network element is the first network layer a backup link; the link connecting the second network element to the aggregation standby network element is a backup link of the second network layer; and the connection between the aggregation primary network element and the aggregation standby network element The link is an aggregation link; the device includes a fault detection module and a first link switching module:

The fault detection module is configured to: whether the primary link of the first network layer and the primary link of the network layer of the second network layer and the aggregation link are simultaneously faulty, Such as Yes, notifying the first link switching module;

The first link switching module is configured to: switch, according to the notification, a network element in a network layer that has not failed the primary link from the primary link in the unfailed network layer to the standby link on.
The networking protection device of claim 7, further comprising a second link switching module configured to trigger the primary link when the failed primary link and/or the aggregation link failure is eliminated The network element in the network layer that has not failed is switched back to the primary link from the alternate link in the non-failed network layer.
The network protection device of claim 8, wherein the fault detection module comprises a message detection sub-module configured to detect whether the first network layer and the second network layer are normally only received. A status detection message sent by a network element in one of the network layers; if yes, determining that the primary link and the aggregation link in the other network layer fail simultaneously.
The network protection device of claim 9, wherein the first link switching module comprises a first triggering submodule, configured to: trigger the convergence of the primary network element to stop to the unfailed network The network element in the layer normally detects the status detection packet, so that the network element determines that the primary link is faulty and switches to the standby link.

Or including a first instruction sending sub-module, configured to: directly send an instruction to switch to the standby link to the network element in the unfailed network layer, so that the network element is from the unfailed network layer The primary link in the switch is switched to the standby link.
The network protection device of claim 10, wherein the second link switching module comprises a second triggering submodule, configured to: trigger the aggregation primary network element to re-route to the unfailed network The network element in the layer normally feeds back the status detection packet, so that the unfailed network element determines that the primary link fault is eliminated and switches to the standby link.

Or including a second instruction sending submodule, configured to: directly send an instruction to switch to the active link to the network element in the unfailed network layer, so that the network element is from the unfailed network The alternate link in the layer switches to the primary link.
The network protection device according to any one of claims 7 to 11, wherein the first network layer is a layer 3 virtual private network layer, the first network element is a core layer network element, and the second network is The layer is a layer 2 virtual private network layer, and the second network element is an access layer network element.
An aggregation primary network element in a networking, where the networking further includes a first network layer, a second network layer, and an aggregation standby network element, where the first network element is located at the first network layer and the second network layer, The second network element, the aggregation primary network element and the aggregation standby network element are located at the convergence of the first network layer and the second network layer; the link connecting the first network element and the aggregation primary network element is the primary use of the first network layer. The link connecting the second network element and the aggregation primary network element is the primary link of the second network layer; the link connecting the first network element and the aggregation standby network element is the standby link of the first network layer. The link connecting the second network element and the aggregation standby network element is a backup link of the second network layer; the link connecting the connection between the primary network element and the aggregation standby network element is an aggregation link; the convergence master The network element includes a memory and a processor; the memory is configured to store instructions; the processor is configured to invoke the instructions to perform the following steps:

Detecting whether the primary link of the one of the first network layer and the second network layer and the aggregation link are simultaneously faulty, and if so, triggering the network element in the network layer where the primary link has not failed Switching from the primary link in the unfailed network layer to the alternate link.
A computer program comprising program instructions which, when executed by a computer, cause the computer to perform the method of any of claims 1-6.
A computer readable storage medium carrying the computer program of claim 14.