WO2016101515A1 - Method and apparatus for determining information technology (it) device port - Google Patents

Abstract

The present invention provides a method and an apparatus for determining an Information Technology (IT) device port, wherein the method includes: an upper computer receives a request message sent from the IT device, wherein the request message carries identification information of the port where the IT device connects with a switch; the upper computer sets the port identification information in an IP address allocated for the IT device; and the upper computer presents the IP address set with the port identification information to a user. The present invention solves the problem in related art of determining the specific location of the IT device only by manually recording the location of the port in the switch where the IP address is located, and enables the user to determine the location of the IT device according to the IP address of the IT device conveniently.

Description

Method and device for determining information technology IT equipment port Technical field

The present invention relates to the field of communications, and in particular to a method and apparatus for determining an IT device port of an information technology.

Background technique

With the rapid development of government and enterprise networks and the Internet of Things, IT equipment such as magnetic arrays and set-top boxes have been widely used. IT equipment is characterized by miniaturization, usually a single device or a small chassis. The IT device provides a management network port, and the hardware address (Media Access Control abbreviated as MAC address) of the management network port and the Internet Protocol (IP) address between the network are indicated on the product label. This MAC address is globally unique and is usually pre-sintered into a Field Replaceable Unit (FRU). The IP address on the label is the initial value. The initial IP address of all IT devices is the same, so that the user can log in to the device for the first time. For example, the initial IP address of the wireless router is usually 192.168.1.1. Users can modify to a new IP address after logging in to the IT device.

Users typically use an Ethernet switch switch to centrally manage multiple IT devices. The L2 layer (Layer 2) forwarding principle of the switch is to find the forwarding port by looking up the MAC+VLAN entry in the L2 table. L2 can only communicate in the same virtual local area network (Virtual Local Area Network for short), and forward the contents of the packet. Will not change, but you can add or remove VLAN TAG. The VLAN TAG is a 4-byte tag defined by IEEE 802.1Q and contains a 12-bit VLAN. A VLAN usually works in two modes: access mode and trunk mode. The access mode port can only be assigned to one port VLAN. The packets carrying the VLAN TAG (tag) are discarded. Only the packets carrying the VLAN TAG (untag) are received. The switch is internally configured with the default VLAN, which is usually the port VLAN (PVID). The outgoing and stripped PVIDs are used to access the network device. The trunk port can be added to multiple VLANs. The inbound and outbound processing of untag packets is the same. In the access mode, the inbound direction can receive the tag packets in the allowed VLAN range. The outbound direction compares the VLAN with the PVID. If they are the same, the VLAN tag is stripped and the untagged packet is sent. If they are not the same, the VLAN tag is not stripped and a tag is sent. This is often used for cascading between switches.

The number of VLANs defined by the 802.1q protocol is only 4096. In order to expand the number of VLANs, the QinQ (VLAN stacking or double VLAN) technology is added. The 802.1Q label is added to the original 802.1Q packet to increase the number of VLANs. To 4096*4096. At the same time, the inner VLAN tag of the QinQ packet The inbound VLAN (TAG) indicates the private network information of the user. The outer VLAN tag (outer VLAN tag) indicates the public network information and can traverse the carrier network to transparently transmit the private network VLAN tag.

QinQ has two types of ports: customer and uplink. The customer port type is connected to the user network. The uplink port type is used to access the service provider network. The packets received by QinQ on the customer port are forced to be inserted into an outer VLAN regardless of whether the VLAN tag is carried. If the customer port sends a packet, the outer VLAN tag is stripped. The uplink port does not insert or strip the outer label, but transparently transmits QinQ packets.

The switch supports the ACL (Access Control List) function. You can set the ACL rule to filter traffic on the network to achieve access control. The action triggered includes modification, drop, redirection, copy to CPU, and so on.

1 is a schematic structural diagram of a centralized management platform for an IT device in the related art. As shown in FIG. 1 , the platform is composed of a host computer, a switch, and a plurality of IT devices, and a management network port of each IT device is connected to a network of the switch. mouth. The main problem facing the platform is that the IP address of each IT device is the same. When multiple IT devices are connected to a switch, IP address conflicts must occur. The solution to the above IP address conflict in the related art is that the DHCP server of the upper computer allocates an IP address to each IT device through a standard DHCP process. As shown in Figure 1, the IT device sends a DHCP request message to the host computer, which carries the MAC address of the IT device. The host computer allocates an IP address to the IT device according to the MAC address according to the previously configured address pool.

The problem in the related art is that the connection between the IT device and the switch is random. Since the MAC address of each IT device is unique, the IP address assigned to any port of the same IT device connected to the switch is always the same. The IP address does not correspond to the port of the switch. When the user needs to determine the specific location of the IT device, the above method can only be used to manually record the IP address at the port of the switch. If the connection location of the IT device and the switch changes, the user needs to manually search the port of the IT device. position.

For the related art, the problem of determining the specific location of the IT device can only be determined by manually recording the IP address at the port location of the switch, and no effective solution has been proposed yet.

Summary of the invention

The embodiment of the invention provides a method and a device for determining an IT device port of an information technology, so as to at least solve the problem in the related art that the specific location of the IT device can be determined only by manually recording the IP address at the port position of the switch.

According to an embodiment of the present invention, there is provided a method for determining an information technology IT device port, comprising: receiving, by a host computer, a request message sent by the IT device, wherein the request message carries the IT device Port identification information that is connected to the switch; the host computer sets the port identification information in an IP address assigned to the IT device; and the upper computer presents the IP address with the port identification information to the user.

When the switch includes only the master switch, the port identifier information includes: first port identifier information, where the first port identifier information is port identifier information that is connected between the master switch and the IT device; When the switch includes the master switch and the slave switch, the port identifier information includes: second port identifier information, third port identifier information, and/or the first port identifier information, where the second port identifier information includes The port identification information that is connected between the master switch and the slave switch, and the third port identifier information includes: port identifier information that is connected between the IT device and the slave switch.

Setting the port identification information in the IP address assigned to the IT device by the host computer includes: when the switch includes only the master switch, the host computer writes the first port identifier information into the IP address a first specified byte of the address; when the switch includes the master switch and the slave switch, the host computer writes the second port identification information to the first specified byte of the IP address, The third port identification information is written to the second designated byte of the IP address and/or the first port identification information is written to the first designated byte of the IP address.

When the switch includes only the master switch, the port of the master switch includes: a first uplink uplink port and a first access port, wherein the master switch is connected to the host computer through the uplink port. The master switch is connected to the IT device by using the access port, where the first port identifier information is the access port identifier information; when the switch includes: a master switch and a slave switch, the port of the master switch includes The first uplink uplink port, the first access access port, and the trunk trunk port, the slave switch port includes: a second uplink uplink port and a second access port, where the master switch The trunk port is connected to the second uplink uplink port of the slave switch, and the slave switch is connected to the IT device by using the second access access port, where the second port identifier information is the trunk port. The third port identification information is the second access port identification information.

The method further includes: the upper computer sends an untag message, and triggers a redirection operation of the master switch and the slave switch, where the destination IP address of the untagged message carries the first specified byte Information and the second specified byte information; the redirection is: the master switch redirects the untag message to the first access port according to a preset rule and the first specified byte information The trunk port, the slave switch redirects the untag message to the second access port according to the preset rule and the second specified byte, where the preset rule is the master switch and The slave access control list ACL is set on the first uplink port and the second uplink port.

According to another embodiment of the present invention, there is provided an apparatus for determining an information technology IT device port, located on a host computer side, comprising: a receiving module, configured to receive a request message sent by the IT device, wherein the request The packet carries the port identification information that is connected to the IT device and the switch; the setting module is configured to set the port identification information in an IP address allocated for the IT device; and the presentation module is configured to be configured to be The IP address of the port identification information is presented to the user.

When the switch includes only the master switch, the port identifier information includes: first port identifier information, where the first port identifier information is port identifier information that is connected between the master switch and the IT device; When the switch includes: a master switch and a slave switch, the port identifier information includes: second port identifier information and third port identifier information, and/or the first port identifier information, where the second port identifier information The device includes: port identification information that is connected between the master switch and the slave switch, and the third port identifier information includes: port identifier information that is connected between the IT device and the slave switch.

The setting module includes: a first writing unit, configured to write the first port identification information into a first designated byte of the IP address when the switch includes only a master switch; and the second writing unit Writing, in the switch, the master switch and the slave switch, the second port identifier information to the first designated byte of the IP address, and writing the third port identifier information to the first address of the IP address Specifying a byte and/or writing the first port identification information to a first designated byte of the IP address.

When the switch includes only the master switch, the port of the master switch includes: a first uplink uplink port and a first access port, wherein the master switch is connected to the host computer through the uplink port, where the master The switch is connected to the IT device by using the access port, where the first port identification information is the access port identification information; when the switch includes: a master switch and a slave switch, the port of the master switch includes: An uplink uplink port, the first access access port, and a trunk trunk port, where the slave switch port includes: a second uplink uplink port and a second access port, wherein the trunk of the master switch The port is connected to the second uplink uplink port of the slave switch, and the slave switch is connected to the IT device by using the second access access port, where the second port identifier information is the trunk port identifier information. The third port identification information is the second access port identification information.

The device further includes: a sending module, configured to send an untagged message, and trigger a redirection operation of the master switch and the slave switch, where the destination IP address of the untagged message carries the first specified word And the second specified byte information, the redirecting is: the master switch redirects the untag message to the first access port according to a preset rule and the first specified byte information Or the trunk port, the slave switch redirects the untag message to the second access port according to the preset rule and the second specified byte, where the preset rule is the master switch And using an access control list ACL from the switch on the first uplink port and the second uplink port setting.

According to the embodiment of the present invention, the port identifier information that is connected between the IT device and the switch is carried in the request packet sent by the IT device to the host computer, and the host device sets the port identification information in the IP address allocated by the IT device, and the IP address is set. The method presented to the user solves the problem that the specific location of the IT device can be determined only by manually recording the IP address at the port position of the switch, so that the user can conveniently determine the location of the IT device according to the IP address of the IT device. .

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a schematic structural diagram of a centralized management platform for an IT device in the related art;

2 is a flow chart of a method for determining an information technology IT device port according to an embodiment of the present invention;

3 is a block diagram showing the structure of an apparatus for determining an information technology IT device port according to an embodiment of the present invention;

4 is a block diagram 1 of an optional structure of an apparatus for determining an information technology IT device port according to an embodiment of the present invention;

FIG. 5 is a second structural block diagram of an apparatus for determining an information technology IT device port according to an embodiment of the present invention; FIG.

6 is a structural block diagram of a centralized management platform for an IT device according to an alternative embodiment of the present invention;

7 is a schematic diagram of a format of a message according to an optional embodiment of the present invention;

FIG. 8 is a schematic diagram of packet encapsulation when a host computer communicates with an IT device according to an alternative embodiment of the present invention; FIG.

9 is a flowchart of a processing method for an upper computer to allocate an IP address according to a VLAN according to an optional embodiment of the present invention;

10 is a schematic diagram of a centralized management of a magnetic array in accordance with an alternative embodiment of the present invention.

detailed description

It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict. The invention will be described in detail below with reference to the drawings in conjunction with the embodiments.

The embodiment provides a method for determining an IT device port of an information technology. FIG. 2 is a flowchart of a method for determining an IT device port of an information technology according to an embodiment of the present invention. As shown in FIG. 2, the steps of the method include:

Step S202: The upper computer receives the request message sent by the IT device.

The request packet carries port identification information that is connected between the IT device and the switch.

Step S204: The host computer sets port identification information in an IP address assigned to the IT device.

Step S206: The host computer presents the IP address with the port identification information to the user.

In this embodiment, the port identifier information that is connected between the IT device and the switch is carried in the request packet sent by the IT device to the upper device, and the host device sets the port identification information in the IP address allocated by the IT device, and presents the IP address. The method for the user solves the problem in the related art that the specific location of the IT device can be determined only by manually recording the IP address at the port position of the switch, so that the user can conveniently determine the location of the IT device according to the IP address of the IT device.

This embodiment can be applied to multiple application scenarios. The following two scenarios are used to illustrate the present invention;

Scenario 1: When the switch includes only the master switch, the port identifier information includes: first port identifier information, where the first port identifier information is the port identifier information that is connected between the master switch and the IT device.

Scenario 2: When the switch includes the master switch and the slave switch, the port identifier information includes: the second port identifier information and the third port identifier information and/or the first port identifier information, where the second port identifier information includes: the master switch and the The port identification information that is connected from the switch, and the third port identification information includes: port identification information that is connected between the IT device and the slave switch.

Based on the foregoing application scenario, the manner in which the upper-level device sets the port identification information in the IP address assigned to the IT device in this embodiment may be implemented as follows:

In scenario 1, that is, when the switch includes only the master switch, the host computer writes the first port identifier information into the first specified byte of the IP address;

In scenario 2, that is, when the switch includes the master switch and the slave switch, the host computer writes the second port identifier information into the first designated byte of the IP address, and writes the third port identifier information into the second designation of the IP address. Bytes and/or write the first port identification information to the first specified byte of the IP address.

The method for setting the port identification information in the IP address of the IT device in the above application scenario is only used as an example. In other application scenarios, corresponding adjustments can be made according to the actual situation.

For the port mode of the master switch and the slave switch, which are also involved in this embodiment, in an optional implementation manner of this embodiment,

When the switch includes only the master switch, the port of the master switch includes: a first uplink uplink port and a first access port, wherein the master switch is connected to the host computer through the uplink port, and the master switch is connected to the IT device through the access port. The port identification information is the access port identification information;

When the switch includes: a master switch and a slave switch, the ports of the master switch include: a first uplink uplink port, a first access access port, and a trunk trunk port, and the slave switch port includes: a second uplink uplink port and a second interface In the access port, the trunk port of the master switch is connected to the second uplink uplink port of the slave switch, and the slave switch is connected to the IT device through the second access port, and the second port identifier information is trunk port identifier information, and the third port is The identification information is the second access port identification information.

In this embodiment, the untagged packet can be sent to the master switch by the switch, and the untagged packet can be sent through the first specified byte information and the second specified byte information carried in the destination IP address of the untagged packet. Redirect to the port of the master switch or slave switch. The specific implementation can be as follows:

Step S11: The master switch and the slave switch use the access control list ACL to set a preset rule on the first uplink port and the second uplink port;

Step S12: The upper computer sends an untagged message, and triggers a redirection operation of the master switch and the slave switch, where the destination IP address of the untagged packet carries the first specified byte information and the second specified byte information; The master switch redirects the untagged packet to the first access port or the trunk port according to the preset rule and the first specified byte information, and the slave switch redirects the untagged packet according to the preset rule and the second specified byte. Go to the second access port.

In this embodiment, a device for determining the port of the information technology IT device is further provided, and the device is configured to implement the foregoing embodiment and the optional implementation manner, and details are not described herein. As used below, the term "module" "unit" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

3 is a structural block diagram of a device for determining an information technology IT device port according to an embodiment of the present invention. The device is located on a host computer side, and the device includes: a receiving module 32, configured to receive a request message sent by an IT device, where the request message is The interface carries the port identification information of the IT device and the switch; the setting module 34 is coupled to the receiving module 32, and is configured to set the port identification information in the IP address assigned to the IT device; the presentation module 36 is coupled and connected to the setting module 34. Set to present the IP address with the port identification information to the user.

Optionally, when the switch includes only the master switch, the port identifier information may include: first port identifier information, where the first port identifier information is port identifier information that is connected between the master switch and the IT device;

When the switch includes: the master switch and the slave switch, the port identifier information may include: second port identifier information and third port identifier information and/or first port identifier information, where the second port identifier information includes: the master switch and the slave switch The port identification information of the switch, and the third port identifier information includes: port identification information of the IT device and the slave switch.

4 is a block diagram of an optional structure of an apparatus for determining an information technology IT device port according to an embodiment of the present invention. As shown in FIG. 4, the setting module 34 includes a first writing unit 42 configured to include only a master switch when the switch includes only the master switch. Writing the first port identification information to the first specified byte of the IP address; the second writing unit 44 is configured to write the second port identification information into the first designation of the IP address when the switch includes the master switch and the slave switch The byte writes the third port identification information to the second designated byte of the IP address and/or writes the first port identification information to the first designated byte of the IP address.

The switch involved in the device of this embodiment may be only one master switch, or one master switch and one slave switch;

FIG. 5 is a second structural block diagram of an apparatus for determining an information technology IT device port according to an embodiment of the present invention. The device further includes:

The sending module 52 is configured to send an untagged message, and trigger a redirection operation of the master switch and the slave switch, where the destination IP address of the untagged packet carries the first specified byte information and the second specified byte information, and is redirected. The master switch redirects the untagged message to the first access port or the trunk port according to the preset rule and the first specified byte information, and the slave switch redirects the untagged message to the second specified byte according to the preset rule and the second specified byte. The second access port, the preset rule is set for the primary switch and the secondary switch using the access control list ACL on the first uplink port and the second uplink port.

The invention is exemplified below in conjunction with alternative embodiments of the invention.

The optional embodiment provides a method for centrally managing an IT device. The IP address is assigned according to the connection location of the IT device and the switch, and the user can determine the specific port of the IT device connected to the switch according to the IP address of the IT device.

The optional embodiment further provides a centralized management platform for an IT device, the platform includes: a host computer, where the DHCP server and the management background reside; the main switch is configured to adopt a Gigabit Ethernet switch, and provides a plurality of 1000M/100M adaptive Ethernet port, supporting VLAN, QinQ, ACL and other functions; from switch, It is configured to use a 100M Ethernet switch and provides several 100M adaptive Ethernet ports and at least one 1000M/100M adaptive Ethernet port to support VLAN and ACL functions. IT equipment is set to provide at least one 1000M/100M. Adaptive Ethernet port.

In this alternative embodiment, one port of the main switch is connected to the upper computer, and the remaining ports can be directly connected to the IT device. When the number of IT devices exceeds the total number of primary switch ports, the primary switch connects to the port through the switch. For example, if the total number of ports on the primary switch is N, the maximum number of N-1 IT devices can be directly connected. If all switches are connected to the switch and each switch has M ports, you can connect (M-1) IT devices. Up to (N-1)*(M-1) IT devices can be managed.

In addition, the IT device pre-sintering requests a unique MAC address from the IEEE, and uses the Dynamic Host Configuration (DHCP) protocol to obtain an ip address from the DHCP server. At this time, the IP address of each IT device is different.

The technical solution adopted by this alternative embodiment includes the following steps:

Step S302: The primary switch is connected to the upper computer, the switch, or the IT device, and the primary switch completes configurations such as VLAN, QinQ, and ACL.

Step S304: Connect the switch from the IT device to complete the configuration of the VLAN and the ACL.

Step S306: The IT device requests an IP address from the DHCP server by using a DHCP request message.

Step S308: The DHCP server of the host computer receives the request message of the IT device, determines the port number of the IT device connected to the switch, and allocates an IP address for the IT device;

Step S310: The upper computer management background starts centralized management of the IT equipment.

In step S302, any network port of the main switch is connected to the host computer. To achieve continuity of the port number, it is recommended that the port of the primary switch (such as No. 1) or the port of the largest port (such as No. 24 of the 24-port switch) be connected to the host computer.

The port of the main switch connected to the host computer is called the uplink port, and is divided into VLANs. It is set to trunk mode, QinQ is enabled, and ACL rules are set. The port on which the main switch is connected to the IT device is called the access port. The VLAN is set to access mode. QinQ is not enabled. The port connected to the switch from the switch is called the trunk port. The VLAN is divided into trunk mode and QinQ is enabled.

The VLAN is divided into: uplink port, access port, or trunk port. The PVID is the same as the port number, and the uplink port is added to the same VLAN as each access port or trunk port. E.g, Port 24 of the 24-port switch is connected to the host computer, and ports 1 to 23 are connected to 23 slave switches or IT devices. The PVIDs of ports 1 to 23 are VLAN 1 to VLAN 23, respectively, and the PVID of port 24 is 24, and It belongs to VLAN1 to VLAN23 at the same time.

Enable QinQ, including the customer port type with the trunk port set to QinQ, and the uplink port type set to the QinQ uplink port type.

The uplink port sets an ACL rule to redirect to the target access port or trunk port according to the destination IP address of the untag packet.

In step S304, the GE switch is connected to the main switch, and the remaining FE ports are connected to the IT device. To implement port number continuity, you are advised to connect the primary switch from the port number of the switch, such as the number 1 or the port of the largest port, such as port 24 of the 24-port switch.

The port that connects the switch from the switch is called the uplink port. The VLAN is set to the trunk mode and the ACL rule is set. The port that connects the IT device from the switch is called the access port, and the VLAN is set to access mode. The uplink port is switched from the switch. QinQ is not enabled on the access port.

The VLAN division includes: the uplink port and the PVID of the access port are the same as the port number, and the uplink port and each access port are added to the same VLAN. For example, the GE1 (25) port of the 24FE+2GE switch is connected to the host computer, and the ports 1 to 24 are connected to 24 IT devices. The PVIDs of the 1st to the 24th are the PVID of the port 1 to VLAN 24 and the port 25 respectively. It is VLAN 25 and is also assigned to VLAN 1 to VLAN 24.

The uplink port sets an ACL rule and redirects to the target access port according to the destination IP address of the untag packet.

In step S306, the IT device sends a DHCP request message to the host computer. If the IT device is connected to the main switch, only one VLAN tag is carried, and the VLAN is the access port number of the IT switch connected to the IT device. If the IT device is connected to the switch, it carries two VLAN tags. The VLAN carried by the inner VLAN tag is the access port number of the IT device connected to the switch. The VLAN carried by the outer VLAN tag is the trunk port number of the switch connected to the switch.

In step S308, the DHCP server extracts the VLAN tag carried in the DHCP request packet sent by the IT device. If there is only one VLAN tag, the VLAN tag carried by the VLAN tag is extracted as the access port number (the access port of the primary switch at this time). If there are two VLAN tags, extract the packets carried by the outer VLAN tag. The VLAN is marked as the trunk port number (the trunk port number of the primary switch at this time), and the VLAN tag carried by the inner VLAN tag is extracted as the access port number of the IT device (in this case, the access port of the slave switch).

The DHCP server allocates the IP address and subnet mask of the IT device according to the trunk port number and the access port number carried in the VLAN tag. The third byte of the IP address is filled in from the access port number of the switch, and the fourth byte is filled in the main switch. Access port number or trunk port number.

In step S310, the management background displays the IP address of the IT device, and the user can determine the location of the IT device according to the IP address. The management background sends management packets to the IT device. The management packets can be untagged or tagged as required. The message sent by the IT device to the host computer is an untagged message.

With this optional embodiment, the basic VLAN, QinQ, ACL, and other technologies are used to skillfully determine the connection relationship between the IT device and the switch port, and use this connection relationship to dynamically allocate the IP address of the IT device, so that the user according to the IT The IP address of the device makes it easy to determine the location of the IT device. In addition, the host computer and each IT device complete message interaction in a single VLAN domain, which is more secure and reliable than a common broadcast domain. When the number of primary switch ports cannot meet the management requirements, you can expand the ports by using the switch.

The implementation of the technical solution will be further described in detail below with reference to the accompanying drawings:

6 is a structural block diagram of a centralized management platform for an IT device according to an alternative embodiment of the present invention. As shown in FIG. 6, the host computer resides in a management background and a DHCP server, wherein the DHCP server is configured to allocate an IP address and a subnet mask to the IT device. Code; management background is a software platform for centralized management of IT equipment. The upper computer usually uses the Windows operating system. It is possible to filter out the VLAN tag by default. In this case, you need to enable the VLAN function in the NIC properties.

The main switch uses a GE switch. The GE switch is used. First, a host computer centrally manages multiple IT devices, and the upstream traffic is large. Therefore, the port connected to the host computer is at least Gigabit bandwidth (GE). Secondly, when the port of the main switch is not enough, it needs to be cascaded from the switch expansion port. The management traffic of a single IT device can be satisfied with a 100M network port (FE). From the cost reduction, the FE switch is selected from the switch. The port connected to the primary switch is GE. On the one hand, it ensures that there is enough upstream bandwidth from the switch, and on the other hand, it does not occupy the FE port number, so that IT devices can be serially numbered. Of course, in the case that the uplink traffic of the uplink port is not more than 100 megabytes, the switch can also use the FE port to connect to the primary switch.

The access port of the main switch is in access mode, and the outbound mode is untag mode. That is, the untag message is sent to the IT device. The uplink port and the trunk port of the main switch are in the trunk mode. The outgoing port of the uplink port is in the tag mode. That is, the packets sent by the master switch to the host computer do not strip the VLAN tags. The outgoing port of the trunk port is in the untag mode. Strip the VLAN tag from the packet from the switch.

The receiving and receiving ports on the switch are all untagged packets. The uplink port is in the trunk mode, and the outgoing port is in the tag mode, that is, the packet sent from the switch to the primary switch carries the VLAN tag.

The VLAN division of the primary switch in Figure 6 is as shown in Table 1:

Table 1

The port number	Port VLAN (PVID)	Home VLAN
GE1	1	1
			GE2	2	2
GEn-1	N-1	N-1
			GEn		n	1 to n

Figure 2 shows the VLAN division from the switch as shown in Table 2:

Table 2

The port number	Port VLAN (PVID)	Home VLAN
FE1	1	1
			FEn	n	n
GE1	n+1	1 to n+1

7 is a schematic diagram of a format of a packet according to an optional embodiment of the present invention. As shown in FIG. 7, the primary switch only enables QinQ on the uplink port and the trunk port, and the access port does not enable QinQ. The untag packet sent by the IT device connected to the access port of the main switch has only one VLAN tag (single vlan tag). The VLAN tag is the internal tag of the main switch. The VLAN is the access port number. The packet sent from the IT device connected to the access port of the switch has two VLAN tags (double vlan tag). The inner VLAN tag is the inner tag of the switch, and the VLAN is the access port number of the switch. The outer VLAN TAG is the outer label of the QinQ function of the primary switch. The VLAN is the trunk port number of the primary switch. For easy differentiation, the TPID of the outer VLAN tag is usually set to 0x9100.

In addition, the IP address shown in FIG. 7 is an algorithm for the upper computer to allocate to the IT device. The subnet mask used in the alternative embodiment is 255.0.0.0. The BYTE1 of the IP address is a custom network address, and BYTE2 is a private information of the IT device. It is used to record the unique identifier of the IT device. This field is not mandatory. It can reflect the private characteristics of the IT device in the characteristic case. For example, the slot number of the magnetic array dual control can be recorded. BYTE3 and BYTE4 indicate the port location information of the IT device connected to the switch. When BYTE3 is non-zero, it indicates the access port number of the switch, and BYTE4 indicates the trunk port number of the main switch. At this time, the IT device is connected to the access port of the slave switch. When BYTE3 is 0, BYTE3 does not indicate the specific port number on the switch. BYTE4 is the access port number of the primary switch. The IT device is connected to the access port of the primary switch. Note that the last byte of the IP address cannot be 0 or 255. Therefore, the VLAN range of the inner VLAN tag is limited. Take 1 to 254. The IP address of D4 in Figure 4 is assigned as 130.0.4.2 and the subnet mask is 255.0.0.0. Assuming that D4 is connected to GE2 of the primary switch, the IP address is 130.0.0.2.

FIG. 8 is a schematic diagram of packet encapsulation when the host computer communicates with the IT device according to an alternative embodiment of the present invention. As shown in FIG. 8 , the packet sent by the IT device D4 to the upper computer is called an uplink packet, and the upper computer sends the packet to the upper device. The packet of the IT device D4 is called a downlink packet. The uplink packet sent by the IT device D4 is an untagged packet. The switch sets the PVID to 4 on the access interface FE4, and both GE3 and FE4 join VLAN 4. The destination MAC address of the uplink packet is the MAC address MAC1 of the host computer. After the switch receives the packet from the FE4, it puts a VLAN tag and carries VLAN 4. The PVID set on the trunk interface GE3 is 3, and the VLAN 4 and the PVID carried in the outgoing packets are inconsistent. Therefore, the packets sent by GE3 still carry VLAN 4. The PVID of the master switch is set to 2, and the QinQ customer port type is enabled. After receiving the packet, the uplink packet is tagged with the outer VLAN tag and carries VLAN 2. The primary switch has enabled the QinQ uplink port type on GE1. The packets sent by GE1 carry two VLAN tags. By extracting the two VLAN tags of the QinQ packet, the host computer determines that the location of the IT device D4 is the FE4 of the slave switch of the GE2 of the primary switch, and then assigns the IP address of the D4 according to the two VLAN tags.

Because the upper computer adopts the Windows commercial operating system, which is limited by the network card type and third-party software, it is usually not possible to directly send tag messages. Some network cards cannot support the network card to join multiple VLANs even if they can send tag messages. Only high-end network cards can Support Vlan trunk function. Although the upper machine sends out untag packets more commonly, the host computer can also send tag messages by installing VMware virtual machines and adopting high-end network cards that support VLAN trunking. The invention does not limit the sending of untag messages or tag messages by the upper computer, and both modes can be supported. The former has low requirements on the software and hardware configuration of the host computer and is highly versatile, but requires more configuration of the switch. The latter has higher requirements on the software and hardware configuration of the host computer. However, the downlink packets are forwarded completely in the QinQ process within the switch, and the configuration of the switch is less.

The packet sent by the host computer is encapsulated in each node as shown in Figure 8. If the host sends a tag packet, it is divided into two cases: if it is sent to the access port of the master switch, only one VLAN is required to be encapsulated. The tag carries the VLAN as the access port number of the primary switch. If it is sent to the access port of the switch, it needs to encapsulate two VLAN tags. The VLAN carried by the outer VLAN tag is the trunk port number of the primary switch, and the inner VLAN tag. The carried VLAN is the access port number of the slave switch. The tag packet is forwarded to the customer port by the QinQ uplink port in the master switch and the slave switch. For example, in Figure 8, the downlink packet carries two VLAN tags. The master switch receives the downlink packet on GE1 and finds that it is a tag. The ACL rule is not triggered. In this case, the VLAN is forwarded to GE2 and GE2 according to the VLAN domain of the outer VLAN. The value is the customer port type. Therefore, the packets sent by GE2 are stripped of the outer VLAN tag. Received the downlink from the switch on GE3 If the packet is found to be a tagged packet, the ACL rule will not be triggered. In this case, the VLAN domain of the inner VLAN is forwarded to the FE4. The FE4 is the access port type. Therefore, the packets sent by the FE4 are stripped of the inner VLAN tag.

If the host sends an untagged packet, the switch can only receive the untagged packet from the switch. The VLANs carried by the primary switch and the VLAN tag that the switch uses on the uplink port are PVIDs. Therefore, the primary switch and the slave switch L2. The table has only the host MAC address plus the PVID entry on the uplink port. There are two problems. Problem 1: The upstream packet search L2 table cannot find the entry of the access port's corresponding VLAN to the host computer. It can only be broadcast in the VLAN domain. Although it can be sent from the uplink port, the switch may limit the rate of broadcast packets. Packet loss; Question 2: Because the PVID of the uplink port is not in the same VLAN domain as the PVID of the access port, the downstream packets cannot be forwarded.

For the first problem, you need to add the uplink port entry in the L2 table of the master-slave switch. The manually added entries are static entries and will not age. Ensure that the host MAC and all access ports and trunk ports have corresponding entries. The entries added by the master-slave switch on the uplink port in Figure 8 are shown in Table 3:

table 3

port	MAC	VLAN
			GE1
MAC1	2
		GE3		MAC1	4

For example, if the 24GE switch is connected to 23 IT devices or from the switch, the uplink port has an entry for each access port or the home VLAN of the trunk port, you need to manually add 23 entries.

For problem two, you need to set the ACL rule to redirect to the target port. The implementation method is as follows: The primary switch sets an ACL rule on the uplink port, and redirects to the corresponding port according to the BYTE4 (non-zero value) of the destination IP address of the untag packet. The packet sent by GE2 is an untagged packet. Therefore, the switch also needs to set an ACL rule on the uplink port to redirect the port to the corresponding port according to the BYTE3 (non-zero value) of the destination IP address of the untagged packet. The ACL rules set by the master and slave switches on the uplink port in Figure 8 are as shown in Table 4:

Table 4

Port	Rule	Action
			GE1	Untag, DIP=X.X.X.2 (X indicates mask)	Redirect to port 2
GE3	Untag, DIP=X.X.4.X (X indicates mask)	Redirect to port 4

For example, if a 24GE switch is connected to 23 IT devices or a redirection rule is established for each access port or trunk port from the switch and uplink port, a total of 23 ACL rules need to be established.

In this embodiment, the star network is used. Because the QinQ can only carry two VLAN tags, the cascading depth of the switch can only be the second level. It is not supported to continue the cascade switch from the switch. According to the management platform shown in Figure 6, If the main switch adopts 24GE switch and the switch uses 24FE+2GE switch, the present invention supports up to 552 IT devices at the same time, which is sufficient for centralized management.

In this alternative embodiment, the DHCP server of the upper computer does not adopt the standard DHCP process for assigning an IP address according to the MAC address, but assigns an IP address according to the VLAN. FIG. 9 is an example. The upper computer allocates an IP address according to the VLAN according to an optional embodiment of the present invention. Flowchart of the processing method, as shown in Figure 9, after detecting the DHCP request message, analyze whether to carry the VLAN tag. If it is an untagged message, it will not process it; if it is a tag message, further analysis is if it is a double vlan tag. Extract the trunk port number of the outer vlan as the primary switch, and extract the internal vlan as the access port number of the switch; if it is a single tag, extract the access port number of the vlan as the primary switch. Finally, according to the IP address algorithm shown in FIG. 7, the IP address of the IT device is allocated, and the DHCP response message is filled in.

10 is a schematic diagram of a centralized management of a magnetic array according to an alternative embodiment of the present invention. As shown in FIG. 10, the main cabinet of the magnetic array usually has two controller slots, which can be inserted into two controller boards, and the magnetic array main The cabinet dual controller Slot IDs are 0 and 1, respectively. If each controller is connected to a switch access port, it is bound to reduce the number of small chassis connected to the switch. The present invention also proposes a method for reducing the waste of the switch port for this scenario. The access port is connected to a hub (HUB), and all the boards in each chassis are connected to the HUB, so that one chassis only occupies one switch port. All ports on the HUB are in a broadcast domain and can be forwarded without configuration. It is cheaper and more convenient than switch, and is very suitable for connecting small chassis. The specific implementation method is as follows: the IT device carries the Slot ID of the board in the vender information field of the DHCP request message, and the DHCP server extracts the Slot ID and fills in the BYTE2 of the IP address shown in FIG. 3. Figure 6 shows a schematic diagram of managing a magnetic array. GE1 of the main switch and FE2 of the switch are connected to each HUB. The main control cabinet A of the magnetic array is connected to HUB1, and the main control cabinet B of the magnetic array is connected to HUB2. The main control cabinet of the magnetic array is A. The IP address corresponding to slot 0 is 130.0.0.1, and the IP address corresponding to slot 1 is 130.1.0.1. The IP address corresponding to slot 0 of the magnetic array main control cabinet B is 130.0.1.2, and the IP address corresponding to slot 1 is 130.1.1.2. In this way, more magnetic arrays can be managed centrally.

In summary, the optional embodiment provides a method for centralized management of an IT device, using a double vlan to carry the port number of the IT device connected to the switch, and setting the IP address of the IT device according to the port number, so that the user according to the IT The IP address of the device can be used to determine the specific location. As long as the switch is configured, centralized management can be realized without changing the IT device and the host computer, which greatly improves the management efficiency.

The above is only an alternative embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, the method and apparatus for determining the port of the information technology IT device provided by the embodiment of the present invention have the following beneficial effects: the related art can only determine the IT device by manually recording the IP address at the port position of the switch. The specific location problem allows the user to easily determine the location of the IT device based on the IP address of the IT device.

Claims (10)

1. A method for determining an IT device IT port includes:

   Receiving, by the upper computer, the request message sent by the IT device, where the request message carries port identification information that is connected between the IT device and the switch;

   The host computer sets the port identification information in an IP address assigned to the IT device;

   The host computer presents an IP address provided with the port identification information to the user.
2. The method of claim 1 wherein

   When the switch includes only the master switch, the port identifier information includes: first port identifier information, where the first port identifier information is port identifier information that is connected between the master switch and the IT device;

   When the switch includes a master switch and a slave switch, the port identifier information includes: second port identifier information, third port identifier information, and/or the first port identifier information, where the second port identifier information The device includes: port identification information that is connected between the master switch and the slave switch, and the third port identifier information includes: port identifier information that is connected between the IT device and the slave switch.
3. The method of claim 2, wherein the setting, by the host computer, the port identification information in an IP address assigned to the IT device comprises:

   When the switch includes only the master switch, the host computer writes the first port identifier information into a first designated byte of the IP address;

   When the switch includes a master switch and a slave switch, the host computer writes the second port identifier information into the first designated byte of the IP address, and writes the third port identifier information into the Decoding a second specified byte of the IP address and/or writing the first port identification information to a first designated byte of the IP address.
4. The method of claim 3, wherein

   When the switch includes only the master switch, the port of the master switch includes: a first uplink uplink port and a first access port, wherein the master switch is connected to the host computer through the uplink port. The master switch is connected to the IT device by using the access port, where the first port identifier information is the access port identifier information;

   When the switch includes: a master switch and a slave switch, the port of the master switch includes: the first uplink uplink port, the first access access port, and a trunk trunk port, where the port of the slave switch includes a second uplink uplink port and a second access port, wherein the trunk port of the master switch is connected to the second uplink uplink port of the slave switch, and the slave switch passes the second interface The access port is connected to the IT device, the second port identifier information is the trunk port identifier information, and the third port identifier information is the second access port identifier information.
5. The method of claim 4 wherein the method further comprises:

   The host computer sends an untag message, and triggers a redirection operation of the master switch and the slave switch, where the destination IP address of the untagged message carries the first specified byte information and the second Specifying the byte information; the redirection is: the master switch redirects the untag message to the first access port or the trunk port according to a preset rule and the first specified byte information, where The slave switch redirects the untag message to the second access port according to the preset rule and the second specified byte, where the preset rule is that the master switch and the slave switch use an access control list. The ACL is set on the first uplink port and the second uplink port.
6. An information technology IT device port determining device is located on the upper computer side and includes:

   a receiving module, configured to receive a request message sent by the IT device, where the request message carries port identification information that is connected between the IT device and the switch;

   Setting a module, configured to set the port identification information in an IP address allocated for the IT device;

   A presentation module is configured to present an IP address with the port identification information set to the user.
7. The apparatus according to claim 6, wherein

   When the switch includes only the master switch, the port identifier information includes: first port identifier information, where the first port identifier information is port identifier information that is connected between the master switch and the IT device;

   When the switch includes: a master switch and a slave switch, the port identifier information includes: second port identifier information and third port identifier information, and/or the first port identifier information, where the second port identifier The information includes: port identification information that is connected between the master switch and the slave switch, and the third port identifier information includes: port identifier information that is connected between the IT device and the slave switch.
8. The apparatus of claim 7, wherein the setting module comprises:

   a first writing unit, configured to write the first port identification information into a first specified byte of the IP address when the switch includes only a master switch;

   a second writing unit, configured to write the second port identification information into the first designated byte of the IP address when the switch includes the master switch and the slave switch, and write the third port identifier information Entering a second specified byte of the IP address and/or writing the first port identification information to a first designated byte of the IP address.
9. The device according to claim 8, wherein

   When the switch includes only the master switch, the port of the master switch includes: a first uplink uplink port and a first access port, wherein the master switch is connected to the host computer through the uplink port, where the master The switch is connected to the IT device by using the access port, where the first port identification information is the access port identification information;

   When the switch includes: a master switch and a slave switch, the port of the master switch includes: the first uplink uplink port, the first access access port, and a trunk trunk port, where the port of the slave switch includes a second uplink uplink port and a second access port, wherein the trunk port of the master switch is connected to the second uplink uplink port of the slave switch, and the slave switch passes the second interface The access port is connected to the IT device, the second port identifier information is the trunk port identifier information, and the third port identifier information is the second access port identifier information.
10. The apparatus of claim 9 wherein said apparatus further comprises:

    a sending module, configured to send an untag message, and trigger a redirection operation of the master switch and the slave switch, where the destination IP address of the untagged packet carries the first specified byte information and the Specifying the byte information, the redirection is: the master switch redirects the untag message to the first access port or the trunk port according to the preset rule and the first specified byte information, The slave switch redirects the untag message to the second access port according to the preset rule and the second specified byte, where the preset rule is that the master switch and the slave switch use access control The list ACL is set on the first uplink port and the second uplink port.

Images