WO2016070725A1

WO2016070725A1 - Method and device for realizing vlan n:1 conversion on dhcp broadcast interaction packet

Info

Publication number: WO2016070725A1
Application number: PCT/CN2015/092755
Authority: WO
Inventors: 吴红海; 蒋宏斌; 朱柳辉
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-11-05
Filing date: 2015-10-23
Publication date: 2016-05-12
Also published as: CN105635330B; CN105635330A

Abstract

Disclosed are a method and device for realizing VLAN N:1 conversion on a DHCP broadcast interaction packet. The method comprises: generating a VLAN conversion table, wherein information about the correlations of a source MAC address, a source VLAN and an upper-layer VLAN are recorded in the VLAN conversion table; and according to the VLAN conversion table, conducting VLAN N:1 conversion on a received DHCP broadcast interaction packet. The present invention realizes the conducting of VLAN N:1 conversion on a DHCP broadcast interaction packet through a processor, thereby making up for the technical gap in the related art that a layer-2 switching chip cannot realize the conducting of VLAN N:1 conversion on the DHCP broadcast interaction packet. Furthermore, by means of the present invention, only one copy of an uplink or downlink DHCP broadcast interaction packet needs to be forwarded without being copied, thereby effectively improving the efficiency of VLAN N:1 conversion and reducing the network load.

Description

Method and device for implementing DHCP broadcast interactive message VLAN N:1 conversion

Technical field

The present invention relates to the field of communications technologies, and in particular, to a method and apparatus for implementing VLAN N:1 conversion of DHCP broadcast interactive messages.

Background technique

A virtual local area network (VLAN) is a method of dividing a physical network into a logical (virtual) local area network. At present, in order to meet the increasingly complex networking requirements, it is often necessary to use VLANs to divide different services and different local area networks in the field networking. For example, Internet services and broadband Internet audiovisual services (ITV) need to use different VLANs. . In order to enable different VLANs to eventually enjoy the same service and not affect each other, it is necessary to introduce a VLAN conversion technology. In VLAN conversion, the N:1 conversion (also known as Nto1 conversion) is the most complicated implementation. The N:1 conversion refers to mapping data in one VLAN to another VLAN.

It is most difficult to interact with broadcast/multicast messages in N:1 conversion. The related Layer 2 switch chip cannot basically implement N:1 conversion of broadcast packets. Even if there are a few broadcast floodings that can be implemented by flooding on the basis of unicast N:1 conversion, for dynamic address resolution. The protocol of the Dynamic Host Configuration Protocol (DHCP) is not applicable. Because the Layer 2 switch chip performs N:1 conversion through a combination of Media Access Control (MAC) and VLAN, the secondary switch chip cannot obtain the source MAC address of the uplink broadcast packet. Therefore, The downlink broadcast packet does not have enough information to determine which upstream VLAN is coming from. Therefore, the VLAN conversion can only be performed according to the configured N:1 conversion entry, that is, the packet is copied N times, and the downlink conversion of all the conversion entries is completed. The implementation of the DHCP class has a security risk for the first-come, first-served protocol interaction. The number of packets is proportional to the number of conversion entries. In the case of a large number of packets, the network load is likely to be aggravated.

Summary of the invention

The main purpose of the embodiment of the present invention is to provide a method and device for implementing VLAN N:1 conversion of a DHCP broadcast interactive message, which is used to solve the problem that the Layer 2 switch chip cannot complete the VLAN N:1 conversion of the DHCP broadcast interactive message.

Based on the above technical problem, the embodiment of the present invention is solved by the following technical solutions.

The embodiment of the present invention provides a method for implementing a VLAN N:1 conversion of a DHCP broadcast interactive message, including: generating a VLAN conversion table, where the mapping relationship between the source MAC address, the source VLAN, and the upper VLAN is recorded in the VLAN translation table. According to the above VLAN translation table, VLAN N:1 conversion is performed on the received DHCP broadcast exchange message.

The method further includes: obtaining, by using a pre-configured Layer 2 switch chip, a source MAC address and a source VLAN of the user terminal required to generate the VLAN conversion table.

The source MAC address and the source VLAN required to generate the VLAN switch table are obtained by using a pre-configured Layer 2 switch chip, including: configuring a packet extraction rule for the Layer 2 switch chip in advance; and receiving the Layer 2 switch chip according to the foregoing The uplink DHCP broadcast exchange message sent by the user terminal extracted by the packet extraction rule is obtained. The source MAC address and the source VLAN of the user terminal are obtained based on the uplink DHCP broadcast exchange message sent for the first time.

The method further includes: pre-configuring the VLAN corresponding information; wherein the VLAN corresponding information records the correspondence relationship between the source VLAN and the upper VLAN; and generating the VLAN conversion table, including: after obtaining the source MAC address and the source VLAN of the user terminal And storing the source MAC address, the source VLAN, and an upper VLAN corresponding to the source VLAN to form a VLAN conversion table.

The VLAN N:1 conversion is performed on the received DHCP broadcast exchange packet according to the foregoing VLAN translation table, including: according to the source MAC address and the source VLAN included in the received uplink DHCP broadcast interaction packet, in the foregoing VLAN The mapping table searches for the corresponding upper VLAN, and converts the source VLAN in the uplink DHCP broadcast exchange packet into a corresponding upper VLAN; according to the source MAC address and the upper VLAN included in the received downlink DHCP broadcast exchange packet, The source VLAN is searched for in the VLAN translation table, and the upper VLAN in the downlink DHCP broadcast exchange packet is converted into a corresponding source VLAN.

The method further includes: after the VLAN conversion table is generated, the VLAN corresponding information is sent to the layer 2 switch chip, and the layer 2 switch chip directly performs the received uplink DHCP broadcast exchange message to perform VLAN N:1 conversion.

The method further includes: receiving a DHCP response packet extracted by the layer 2 switch chip according to the packet extraction rule; obtaining a source IP address corresponding to the source MAC address based on the DHCP response packet; and adding the VLAN translation table Source IP address corresponding to the source MAC address.

The method further includes: receiving an address resolution protocol ARP broadcast request message extracted by the layer 2 switch chip according to the packet extraction rule; and according to the uplink VLAN and the source IP address included in the ARP broadcast request message, in the VLAN In the translation table, the corresponding source VLAN is searched, and the uplink VLAN in the ARP broadcast request packet is converted into the corresponding source VLAN.

The embodiment of the present invention further provides a device for implementing VLAN N:1 conversion of a DHCP broadcast interactive message, comprising: a configuration module, configured to generate a VLAN conversion table; wherein the source MAC address, the source VLAN, and the source VLAN are recorded in the VLAN conversion table. Corresponding relationship information of the upper VLAN; the conversion module is configured to perform VLAN N:1 conversion on the received DHCP broadcast interactive packet according to the foregoing VLAN translation table.

The device further includes an obtaining module configured to obtain a source MAC address and a source VLAN of the user terminal required to generate the VLAN conversion table by using a pre-configured Layer 2 switch chip.

The obtaining module is configured to: configure a packet extraction rule for the Layer 2 switch chip in advance; and receive an uplink DHCP broadcast interaction message that is sent by the user terminal according to the packet extraction rule for the first time; The uplink DHCP broadcast exchange message is sent to obtain the source MAC address and the source VLAN of the user terminal.

The configuration module is configured to: pre-configure VLAN corresponding information; wherein, the foregoing VLAN corresponding information Recording the mapping relationship between the source VLAN and the upper VLAN. After obtaining the source MAC address and the source VLAN of the user terminal, the source MAC address, the source VLAN, and the upper VLAN corresponding to the source VLAN are stored to form a VLAN switch. table.

The foregoing conversion module is configured to: in the foregoing VLAN translation table, search for a corresponding upper VLAN according to the source MAC address and the source VLAN included in the received uplink DHCP broadcast exchange message, and the uplink DHCP broadcast interaction packet The source VLAN is converted into a corresponding upper VLAN; the source VLAN address and the upper VLAN included in the received downlink DHCP broadcast exchange message are searched for the corresponding source VLAN in the VLAN translation table, and the downlink DHCP broadcast interaction is reported. The upper VLAN in the text is converted into the corresponding source VLAN.

The device further includes: a sending module, configured to send the VLAN corresponding information to the layer 2 switch chip after the VLAN conversion table is generated, and directly receive the received uplink DHCP broadcast by the layer 2 switch chip Interwork packets for VLAN N:1 conversion.

The configuration module is further configured to: receive the DHCP response message extracted by the layer 2 switch chip according to the packet extraction rule; obtain the source IP address corresponding to the source MAC address based on the DHCP response message; The source IP address corresponding to the source MAC address is added.

The conversion module is further configured to: receive an address resolution protocol ARP broadcast request message that is extracted by the layer 2 switch chip according to the packet extraction rule; and according to the uplink VLAN and the source IP address included in the ARP broadcast request message, In the VLAN conversion table, the source VLAN is searched for, and the uplink VLAN in the ARP broadcast request packet is converted into a corresponding source VLAN.

The beneficial effects of the embodiments of the present invention are as follows:

In the embodiment of the present invention, the source MAC address information in the DHCP broadcast exchange message is obtained by the processor, and a VLAN conversion table including the source MAC address, the source port, the source VLAN, and the upper VLAN correspondence information is generated, and the VLAN conversion table is used to perform DHCP. Broadcast interactive packets are VLAN N:1.

In the embodiment of the present invention, the VLAN N:1 conversion of the DHCP broadcast interactive message is implemented by the processor, and the technology blank of the VLAN N:1 conversion of the DHCP broadcast interactive message cannot be implemented in the related art. Further, the present invention only needs to forward one copy of the uplink or downlink DHCP broadcast exchange message without copying, thereby effectively improving the VLAN N:1 conversion efficiency and reducing the network load.

DRAWINGS

FIG. 1 is a flowchart of a method for implementing VLAN N:1 conversion of a DHCP broadcast interactive message according to an embodiment of the invention;

2 is a flowchart of generating a VLAN conversion table by a Layer 2 switch chip according to an embodiment of the invention;

FIG. 3 is a specific flowchart of VLAN N:1 conversion and forwarding of a DHCP broadcast interactive message according to an embodiment of the present invention; FIG.

4 is a flowchart of a step of VLAN N:1 conversion of an ARP broadcast request message according to an embodiment of the present invention;

FIG. 5 is a structural diagram of a system for implementing VLAN N:1 conversion of a DHCP broadcast interactive message according to an embodiment of the present invention; FIG.

FIG. 6 is a structural diagram of an apparatus for implementing VLAN N:1 conversion of a DHCP broadcast interactive message according to an embodiment of the invention.

detailed description

The VLAN N:1 conversion (also referred to as VLAN Nto1 conversion) is to map the source VLAN of the user terminal included in the uplink packet to the upper VLAN. The upper VLAN included in the downlink packet is mapped to the source VLAN of the user terminal. Further, the uplink packet is: a packet sent from the user side to the network side, that is, a packet that is sent from the user interface of the Layer 2 switch chip and sent from the network side interface of the Layer 2 switch chip; the downlink packet is: A packet sent from the side to the user side, that is, a packet that is sent from the network side interface of the Layer 2 switch chip and sent from the user side interface of the Layer 2 switch chip.

In order to solve the problem that the Layer 2 switch chip cannot complete the VLAN N:1 conversion of the DHCP broadcast interactive message, the embodiment of the present invention provides a method and device for implementing the DHCP broadcast interactive message VLAN N:1 conversion.

The main idea of the present invention is to obtain the source MAC address information in the DHCP broadcast interactive message by using the processor, and generate the source MAC address, the source port, the source VLAN, and the upper VLAN. The VLAN conversion table of the information; and the VLAN conversion table is used to perform VLAN N:1 conversion on the DHCP broadcast interactive message.

In the embodiment of the present invention, the VLAN N:1 conversion of the DHCP broadcast interactive packet is implemented by the processor, and the technology blank of the VLAN N:1 conversion of the DHCP broadcast interactive packet cannot be implemented in the related technology; The uplink or downlink DHCP broadcast exchange packets need only be forwarded one copy, and no copying is required, which effectively improves the VLAN N:1 conversion efficiency and reduces the network load.

The invention will be further described in detail below with reference to the drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

As shown in FIG. 1, FIG. 1 is a flowchart of a method for implementing VLAN N:1 conversion of a DHCP broadcast interactive message according to an embodiment of the invention.

Step S110, generating a VLAN conversion table.

The mapping information between the source MAC address, the source VLAN, and the upper VLAN is recorded in the VLAN translation table. Further, the VLAN translation table may also record information such as a source port and a source IP address.

The source MAC address refers to the MAC address of the user terminal, that is, the MAC address of the uplink packet. The source VLAN is the initial VLAN of the upstream packet, that is, the VLAN before the transition of the upstream packet VLAN N:1. The upper-layer VLAN is the VLAN of the downlink packet, that is, the VLAN of the upstream packet VLAN N:1. The source port is the source port number that the upstream packet enters, that is, the destination port number corresponding to the downlink packet. The source IP address refers to the Internet Protocol Address (IP address) of the user terminal.

Specifically, the source MAC address and the source VLAN of the user terminal required for generating the VLAN translation table can be obtained by collecting related information of the user terminal set in the network. The generated VLAN can also be obtained through the pre-configured Layer 2 switch chip. The source MAC address and source VLAN of the user terminal required for the conversion table. Those skilled in the art should know that the manner of obtaining user terminal information is not limited thereto.

The corresponding information of the VLAN (or the conversion rule) is configured in advance, and the corresponding information of the VLAN includes the correspondence between the source VLAN and the upper VLAN.

After obtaining the source MAC address and the source VLAN of the user terminal, the source MAC address, the source VLAN, and the upper VLAN corresponding to the source VLAN are correspondingly stored to form a VLAN conversion table, and the VLAN conversion table is configured. .

Step S120: Perform VLAN N:1 conversion on the received DHCP broadcast exchange message according to the VLAN translation table.

Performing the VLAN N:1 conversion specifically includes the following steps:

Step 1: Differentiate the direction of the DHCP broadcast interactive packet. The type of the DHCP broadcast exchange packet includes the uplink DHCP broadcast exchange packet and the downlink DHCP broadcast interaction packet. The uplink and downlink need to be distinguished after receiving.

Step 2: Parsing the DHCP broadcast interactive packet. The source MAC address and the source VLAN are parsed in the uplink DHCP broadcast exchange packet. The source MAC address and the upper VLAN are parsed in the downlink DHCP broadcast exchange packet.

Step 3: Implement VLANN:1 conversion between the source VLAN and the upper VLAN based on the parsed information and the VLAN translation table. Based on the two pieces of information parsed, the remaining information corresponding to the two pieces of information can be found in the VLAN conversion table. For example, the source MAC address and the source VLAN are parsed, and the corresponding upper VLAN is searched in the VLAN translation table.

Step 4: After the VLAN N:1 is converted, the DHCP broadcast interactive packet is sent out through the corresponding source port. The uplink DHCP broadcast packet is sent out through the uplink port, and the downlink DHCP broadcast packet is sent out through the downlink port (source port). Further, after the source port number corresponding to the source MAC address and the source VLAN is recorded in the VLAN translation table, the VLAN translation table may be used to query from which source port the converted DHCP broadcast interaction message should be sent.

The following describes the process of obtaining the user terminal information through the layer 2 switch chip and forming the VLAN conversion table. As shown in FIG. 2, FIG. 2 is a flowchart of generating a VLAN conversion table by a Layer 2 switch chip according to an embodiment of the invention.

Step S210: Configure a packet extraction rule for the Layer 2 switch chip in advance.

The Layer 2 switch chip is used to receive and forward packets.

The packet extraction rule includes, but is not limited to, the type of the target message, the condition that the target message is satisfied, and the destination that the extracted target message needs to be transmitted.

The type of the target packet includes, but is not limited to, a DHCP broadcast exchange message, an address resolution protocol (ARP) broadcast request message, and an DHCP response (Acknowledgement, ACK for short) message.

The conditions for the target packet are met, but are not limited to: when the VLAN translation table is generated, the uplink DHCP broadcast exchange message sent by the user terminal and the DHCP response message sent by the network side are extracted; after the VLAN conversion table is generated, the uplink DHCP is extracted. Broadcast interactive packets, downlink DHCP broadcast interactive packets, and ARP broadcast request packets.

In this embodiment, the destination end to which the target message is transmitted is a processor. The processor is the execution body of the S210-S240.

The processor sends the packet extraction rule to the Layer 2 switch chip, so that the packet extraction rule takes effect on the Layer 2 switch chip, and the packet extraction rule is executed by the Layer 2 switch chip.

Step S220, receiving a DHCP broadcast interactive message extracted by the layer 2 switch chip according to the packet extraction rule.

The Layer 2 switch chip, in the process of receiving the message, carries out the packet according to the message extraction rule, and after extracting the destination message, transmits the target message to the processor.

In this embodiment, in order to quickly implement the VLAN N:1 conversion of the DHCP broadcast exchange message, the first uplink DHCP broadcast exchange message sent by the user terminal is extracted, and the VLAN conversion table is dynamically generated. Further, the VLAN before the uplink DHCP broadcast exchange packet is not converted needs to be consistent with the source VLAN to which the user terminal belongs.

Step S230: Obtain user terminal information such as a source MAC address, a source port number, and a source VLAN of the user terminal, based on the uplink DHCP broadcast exchange message sent by the user terminal.

Step S240: Store the obtained source MAC address, source port number, source VLAN, and upper VLAN corresponding to the source VLAN to form a VLAN conversion table.

The source VLAN is used as the index to query the VLAN corresponding information, that is, the upper VLAN corresponding to the source VLAN can be obtained.

The source port number of the user terminal is obtained in the uplink DHCP broadcast exchange message, so that the obtained source port number information can be added in the VLAN translation table, so that after the VLAN N:1 conversion is completed, the source port number and the source VLAN are used. Sends a downlink DHCP broadcast exchange packet.

In an embodiment, between the steps S220 and S230, the validity check of the uplink DHCP broadcast interactive packet may be performed to confirm whether the actual length of the packet is the same as the length recorded in the packet, and whether the checksum is correct. Whether the direction of the message (upstream or downstream) conflicts with the actual one. If the actual length of the packet is the same as the record length, the checksum is correct, and the direction is correct, the packet is valid. For the legal packet, step S230 is performed. If the invalid packet is discarded, the user terminal that sends the packet is the second. The uplink DHCP broadcast exchange packet sent as the first uplink DHCP broadcast interactive packet.

The DHCP broadcast interactive packet VLAN N:1 conversion and forwarding is implemented according to the generated VLAN translation table. As shown in FIG. 3, it is a specific flowchart of a DHCP broadcast interactive message VLAN N:1 conversion and forwarding according to an embodiment of the present invention.

Step S310, the Layer 2 switch chip extracts a DHCP broadcast interaction message according to the packet extraction rule.

Step S320: The Layer 2 switch chip reports the extracted DHCP broadcast interaction message to the processor.

Step S330, the processor performs validity check on the DHCP broadcast interaction packet. For illegal DHCP broadcasts The inter-packet message performs step S340; and the legal DHCP broadcast exchange message performs step S350. The legality check is as described above and will not be described in detail here.

In step S340, the processor discards the invalid DHCP broadcast interaction message and releases the corresponding resource.

Step S350, the processor determines the direction of the DHCP broadcast interactive message. The uplink DHCP broadcast interactive message is executed in step S360, and the downlink DHCP broadcast interactive message is executed in step S380.

Step S360: The processor performs VLAN N:1 conversion on the uplink DHCP broadcast exchange message.

The source VLAN address and the source VLAN included in the received uplink DHCP broadcast exchange packet are searched for the corresponding upper VLAN in the VLAN translation table, and the source VLAN in the uplink DHCP broadcast exchange packet is converted into the corresponding upper VLAN.

In step S370, the processor sends the uplink DHCP broadcast exchange message that completes the VLAN N:1 conversion to the uplink port of the layer 2 switch chip.

Step S380: The processor performs VLAN N:1 conversion on the downlink DHCP broadcast exchange message.

The source MAC address and the upper-layer VLAN included in the received downlink DHCP broadcast exchange packet are searched for the corresponding source VLAN in the VLAN translation table, and the upper-layer VLAN in the downlink DHCP broadcast exchange packet is converted into the corresponding source VLAN.

In step S390, the processor sends the downlink DHCP broadcast exchange packet that completes the VLAN N:1 conversion to the downlink interface of the Layer 2 switch chip.

According to the source MAC address and the upper-layer VLAN included in the received downlink DHCP broadcast exchange packet, the corresponding source port number is searched in the VLAN translation table, and the downlink DHCP broadcast exchange packet of the VLAN N:1 conversion is completed to the source port. The source port (the lower link) pointed to by the number is sent. And receiving, by the user terminal connected to the source port, the downlink DHCP broadcast exchange message after the VLAN N:1 conversion.

In one embodiment, in order to speed up the forwarding efficiency of the DHCP broadcast exchange message, the VLAN corresponding information is sent to the Layer 2 switch chip, so that the VLAN corresponding information is valid on the Layer 2 switch chip, and the Layer 2 switch chip directly receives the message. The upstream DHCP broadcast exchange packet is sent to VLAN N:1. Further, before the Layer 2 switch chip receives the packet, the rule of the source VLAN or the source VLAN can be sent to the Layer 2 switch chip. When an entry in the VLAN translation table is generated, a user is generated. After the mapping between the source VLAN, the source port, the source port, and the upper VLAN of the terminal, the mapping between the source VLAN and the upper VLAN included in the VLAN corresponding information is based on the mapping between the source VLAN and the upper VLAN. The relationship is sent to the Layer 2 switch chip to replace the null rule that is valid in the Layer 2 switch chip or the source VLAN to the source VLAN. This mode can prevent the source of the uplink DHCP broadcast interactive packet from being sent for the first time. Before the MAC address, the DHCP broadcast exchange packet is forwarded by the Layer 2 switch chip.

Generally, the upper VLANs of the same source VLAN are the same as the upper VLANs. Therefore, if the mapping between the source VLAN and the upper VLAN is included in the VLAN corresponding information, the packets are transmitted according to the downlink DHCP broadcast. The upper-layer VLAN included in the upper-layer VLAN cannot be used to determine the source VLAN of the upper-layer VLAN. The VLAN N:1 conversion of the downstream DHCP broadcast packets is not directly performed by the Layer 2 switch chip. The downlink DHCP broadcast packets are sent to the processor for VLAN. N:1 conversion.

The DHCP server sends an ARP broadcast request packet to the DHCP server. The DHCP server sends an ARP broadcast request packet to check whether the user terminal is legal and whether the obtained IP address is in progress. use. In order to ensure that the downlink ARP broadcast request message can correctly complete the VLAN N:1 conversion and forwarding, the embodiment of the present invention may further improve the VLAN translation table to implement the downlink ARP broadcast request message based on the improved VLAN translation table. VLAN N:1 conversion.

As shown in FIG. 4, FIG. 4 is a flowchart of a procedure of VLAN N:1 conversion of an ARP broadcast request message according to an embodiment of the present invention.

Step S410, receiving a DHCP response message extracted by the layer 2 switch chip according to the packet extraction rule.

Step S420: Acquire a source IP address corresponding to the source MAC address based on the DHCP response message.

The source IP address is an address assigned to the user by the DHCP server through the DHCP protocol.

If the user terminal applies for an IP address, the processor receives the DHCP ACK packet sent by the DHCP server when receiving the downlink packet. The yiaddr (your ip address field) of the DHCP protocol field in the DHCP ACK packet is parsed, and the IP address in the field is obtained.

Step S430, adding a source IP address corresponding to the source MAC in the VLAN translation table.

The source MAC address and the upper VLAN can be obtained in the DHCP response packet because the DHCP response packet is a unicast packet and is a downlink packet. In the VLAN translation table, the obtained IP address can be saved under the entry corresponding to the source MAC address and the upper VLAN.

Step S440, receiving an ARP broadcast request message extracted by the layer 2 switch chip according to the packet extraction rule.

The ARP broadcast request packet is an ARP packet sent by the DHCP server to the user terminal. The Layer 2 switch chip packets the ARP broadcast request received by the uplink port to the processor.

In step S450, the obtained ARP broadcast request packet is parsed, and the source IP address and the upper VLAN included in the APR packet are obtained.

Step S460: Search for the corresponding source VLAN in the VLAN translation table according to the uplink VLAN and the source IP address included in the ARP broadcast request message. Further, in the VLAN translation table, the corresponding source port number is searched for.

Step S470: Convert the upper VLAN in the ARP broadcast request message to the corresponding source VLAN.

Step S480, the converted ARP broadcast request message is sent to the user terminal corresponding to the source VLAN. Further, the method is sent to a user terminal corresponding to the source VLAN and the source port number.

In order to explain the present invention more clearly, a structural diagram of a system for implementing VLAN N:1 conversion of DHCP broadcast interactive messages is shown below, as shown in FIG. 5.

The meanings of the symbols in Figure 5 are:

SrcMac: Source MAC; CVLAN: CVLAN; SVLAN: SVLAN; SrcPort: SrcPort; SrcIp: SrcIp.

The system includes six user terminals (PC A1 to A3, PC B1 to B3), two home gateways (HG1 and HG2), one optical network unit (ONU), and an optical line terminal ( Optical Line Terminal (OLT).

PC A1 to A3 are connected to one end of HG1; PCs B1 to B3 are connected to one end of HG2; the other end of HG1 is connected to the A port of the ONU (the lower port); the other end of HG2 is connected to the B port of the ONU (the lower port); the upper port of the ONU is connected. One end of the OLT; the other end of the OLT is connected to the Ethernet.

The Layer 2 switch chip in the ONU extracts the first broadcast of the DHCP broadcast exchange message and the received DHCP response message from the PCs A1 to A3 and PC B1 to B3. The processor in the ONU parses the DHCP broadcast exchange message, obtains SrcMac, CVLAN, and SrcPort; parses the DHCP response message, and obtains SrcIp, SrcMac, and SVLAN. Fill in the obtained information in the VLAN conversion table according to the user terminal. The SVLAN corresponding to the CVLAN is filled in the VLAN translation table according to the preset VLAN mapping information. Finally, a VLAN conversion table that can be used is generated, as shown in the table in FIG.

After performing the VLAN N:1 conversion, the ONU receives the uplink DHCP broadcast exchange message from the PC, and the processor determines, in the VLAN translation table, the CVLAN and the SVLAN corresponding to the SrcMac in the uplink DHCP broadcast exchange message, and The CVLAN in the uplink DHCP broadcast exchange packet is converted into a corresponding SVLAN and sent to the OLT through the uplink port. After receiving the downlink DHCP broadcast exchange message from the Ethernet, the processor determines, in the VLAN translation table, the CVLAN corresponding to the SrcMac and the SVLAN in the downlink DHCP broadcast exchange message, and the SVLAN in the downlink DHCP broadcast exchange message. Convert to the corresponding CVLAN and send it to the corresponding CVLAN through the corresponding SrcPort. After receiving the downlink ARP broadcast request packet from the Ethernet, the processor determines, in the VLAN translation table, the CVLAN corresponding to the SrcIP and the SVLAN in the downlink ARP broadcast request packet, and the SVLAN in the downlink ARP broadcast request packet. Convert to CVLAN and send it to the corresponding CVLAN through the corresponding SrcPort.

The embodiment of the invention further provides an apparatus for implementing VLAN N:1 conversion of a DHCP broadcast interactive message. The device is the above processor.

As shown in FIG. 6, FIG. 6 is a structural diagram of an apparatus for implementing VLAN N:1 conversion of a DHCP broadcast interactive message according to an embodiment of the present invention. The device includes:

The configuration module 610 is configured to generate a VLAN translation table, where the mapping information of the source MAC address, the source VLAN, and the upper VLAN is recorded in the VLAN translation table.

The conversion module 620 is configured to perform VLAN N:1 conversion on the received DHCP broadcast exchange message according to the VLAN translation table.

In an embodiment, the apparatus further includes an obtaining module 630 configured to obtain, by using a pre-configured Layer 2 switch chip, a source MAC address and a source VLAN of the user terminal required to generate the VLAN translation table.

The obtaining module 630 is configured to: configure a packet extraction rule for the Layer 2 switch chip in advance; receive an uplink DHCP broadcast interaction message that is sent by the user terminal for the first time according to the packet extraction rule; and receive the uplink DHCP broadcast interaction based on the first transmission. The packet obtains the source MAC address and source VLAN of the user terminal.

The configuration module 610 is configured to pre-configure the VLAN corresponding information. The VLAN corresponding information records the correspondence between the source VLAN and the upper VLAN. After obtaining the source MAC address and the source VLAN of the user terminal, the source MAC address and the source are obtained. The VLAN and the upper VLAN corresponding to the source VLAN are stored correspondingly to form a VLAN translation table.

The conversion module 620 is configured to: according to the source MAC address and the source VLAN included in the received uplink DHCP broadcast exchange message, search for a corresponding upper VLAN in the VLAN translation table, and convert the source VLAN in the uplink DHCP broadcast exchange message. And corresponding to the upper-layer VLAN; according to the source MAC address and the upper-layer VLAN included in the received downlink DHCP broadcast exchange message, the corresponding source VLAN is searched in the VLAN translation table, and the upper-layer VLAN in the downlink DHCP broadcast exchange message is converted. Become the corresponding source VLAN.

In another embodiment, the device further includes a sending module 640, configured to send the VLAN corresponding information to the Layer 2 switching chip after the VLAN conversion table is generated, and directly receive the received uplink DHCP broadcast by the Layer 2 switching chip. Interwork packets for VLAN N:1 conversion.

In another embodiment, the configuration module 610 is further configured to: receive a DHCP response message extracted by the layer 2 switch chip according to the packet extraction rule; obtain a source IP address corresponding to the source MAC address based on the DHCP response message; Add the source IP address corresponding to the source MAC address in the table.

The conversion module 620 is further configured to: receive an address resolution protocol ARP broadcast request message extracted by the layer 2 switch chip according to the packet extraction rule; and in the VLAN conversion table according to the uplink VLAN and the source IP address included in the ARP broadcast request message, Find the source VLAN and translate the upstream VLAN in the ARP broadcast request packet to the corresponding source VLAN.

The functions of the device according to the present invention have been described in the method embodiments shown in FIG. 1 to FIG. 5. Therefore, in the description of the present embodiment, reference may be made to the related description in the foregoing embodiment. Do not repeat them.

While the preferred embodiments of the present invention have been disclosed for purposes of illustration, those skilled in the art will recognize that various modifications, additions and substitutions are possible, and the scope of the invention should not be limited to the embodiments described above.

Industrial applicability

In the embodiment of the present invention, the source MAC address information in the DHCP broadcast interactive packet is obtained by the processor, and a VLAN conversion table including the source MAC address, the source port, the source VLAN, and the upper VLAN corresponding relationship information is generated, and the VLAN conversion table is used. VLAN N:1 conversion for DHCP broadcast exchange packets. Through the processor to achieve a wide range of DHCP The VLAN N:1 conversion of the broadcast packet is used to make up the technical blank of the VLAN N:1 conversion of the DHCP broadcast interactive packet. Further, the present invention only needs to forward one copy of the uplink or downlink DHCP broadcast exchange message without copying, thereby effectively improving the VLAN N:1 conversion efficiency and reducing the network load.

Claims

A method for implementing a dynamic address resolution protocol DHCP broadcast interactive message virtual local area network VLAN N:1 conversion, comprising:

Generating a VLAN conversion table, where the mapping information of the source MAC address, the source VLAN, and the upper VLAN is recorded in the VLAN translation table;

And performing VLAN N:1 conversion on the received DHCP broadcast exchange packet according to the VLAN translation table.
The method of claim 1 wherein the method further comprises:

The source MAC address and the source VLAN of the user terminal required to generate the VLAN translation table are obtained through a pre-configured Layer 2 switch chip.
The method of claim 2, wherein the source MAC address and the source VLAN required to generate the VLAN translation table are obtained by using a pre-configured Layer 2 switch chip, including:

Configuring a packet extraction rule for the Layer 2 switch chip in advance;

Receiving, by the layer 2 switch chip, an uplink DHCP broadcast interaction message sent by the user terminal that is first sent by the user equipment according to the packet extraction rule;

And obtaining a source MAC address and a source VLAN of the user terminal according to the first uplink DHCP broadcast exchange message.
The method of claim 1, 2 or 3, wherein the method further comprises:

The VLAN corresponding information is pre-configured; wherein the VLAN corresponding information records the correspondence relationship between the source VLAN and the upper VLAN;

Generate a VLAN translation table, including:

After obtaining the source MAC address and the source VLAN of the user terminal, the source MAC address, the source VLAN, and the upper VLAN corresponding to the source VLAN are stored correspondingly to form a VLAN conversion table.
The method of claim 4, wherein the VLAN N:1 conversion is performed on the received DHCP broadcast exchange message according to the VLAN translation table, including:

The source VLAN address and the source VLAN included in the received uplink DHCP broadcast exchange message are searched for the corresponding upper VLAN in the VLAN translation table, and the source VLAN in the uplink DHCP broadcast exchange packet is converted into a corresponding Upper VLAN;

And searching for the corresponding source VLAN in the VLAN translation table according to the source MAC address and the upper VLAN included in the received downlink DHCP broadcast exchange packet, and converting the upper VLAN in the downlink DHCP broadcast interaction packet into a corresponding Source VLAN.
The method of claim 4 wherein the method further comprises:

After the VLAN conversion table is generated, the VLAN corresponding information is sent to the layer 2 switch chip, where The Layer 2 switch chip directly performs the VLAN N:1 conversion on the received uplink DHCP broadcast exchange message.
The method of claim 3 wherein the method further comprises:

Receiving a DHCP response message extracted by the layer 2 switch chip according to the packet extraction rule;

Obtaining a source IP address corresponding to the source MAC address, based on the DHCP response packet;

Adding a source IP address corresponding to the source MAC in the VLAN translation table.
The method of claim 7 wherein said method further comprises:

Receiving, by the layer 2 switch chip, an address resolution protocol ARP broadcast request message extracted according to the packet extraction rule;

And searching, according to the uplink VLAN and the source IP address, in the ARP broadcast request packet, searching for a corresponding source VLAN in the VLAN translation table, and converting the uplink VLAN in the ARP broadcast request packet into a corresponding source. VLAN.
A device for implementing VLAN N:1 conversion of a DHCP broadcast interactive message includes:

The configuration module is configured to generate a VLAN conversion table, where the VLAN conversion table records correspondence information between the source VLAN and the upper VLAN;

The conversion module is configured to perform VLAN N:1 conversion on the received DHCP broadcast exchange message according to the VLAN conversion table.
The apparatus of claim 9, wherein the apparatus further comprises an acquisition module configured to obtain, by a pre-configured Layer 2 switch chip, a source MAC address and a source VLAN of the user terminal required to generate the VLAN translation table.
The apparatus of claim 10 wherein said obtaining module is configured to:

Configuring a packet extraction rule for the Layer 2 switch chip in advance;

Receiving, by the layer 2 switch chip, an uplink DHCP broadcast interaction message sent by the user terminal that is first sent by the user equipment according to the packet extraction rule;

And obtaining a source MAC address and a source VLAN of the user terminal according to the first uplink DHCP broadcast exchange message.
The apparatus of claim 9, 10 or 11, wherein said configuration module is configured to:

The VLAN corresponding information is pre-configured; wherein the VLAN corresponding information records the correspondence relationship between the source VLAN and the upper VLAN;

After obtaining the source MAC address and the source VLAN of the user terminal, the source MAC address, the source VLAN, and the upper VLAN corresponding to the source VLAN are stored correspondingly to form a VLAN conversion table.
The apparatus of claim 12 wherein said conversion module is configured to:

The source VLAN address and the source VLAN included in the received uplink DHCP broadcast exchange message are searched for the corresponding upper VLAN in the VLAN translation table, and the source VLAN in the uplink DHCP broadcast exchange packet is converted into a corresponding Upper VLAN;

And searching for the corresponding source VLAN in the VLAN translation table according to the source MAC address and the upper VLAN included in the received downlink DHCP broadcast exchange packet, and converting the upper VLAN in the downlink DHCP broadcast interaction packet into a corresponding Source VLAN.
The device of claim 12, wherein the device further comprises: a sending module, configured to send the VLAN corresponding information to the layer 2 switch chip after the VLAN conversion table is generated, The Layer 2 switch chip directly performs the VLAN N:1 conversion on the received uplink DHCP broadcast exchange message.
The apparatus of claim 11 wherein said configuration module is further configured to:

Receiving a DHCP response message extracted by the layer 2 switch chip according to the packet extraction rule;

Obtaining a source IP address corresponding to the source MAC address, based on the DHCP response packet;

Adding a source IP address corresponding to the source MAC in the VLAN translation table.
The apparatus of claim 15 wherein said conversion module is further configured to:

Receiving, by the layer 2 switch chip, an address resolution protocol ARP broadcast request message extracted according to the packet extraction rule;

And searching, according to the uplink VLAN and the source IP address, in the ARP broadcast request packet, searching for a corresponding source VLAN in the VLAN translation table, and converting the uplink VLAN in the ARP broadcast request packet into a corresponding source. VLAN.