WO2016101646A1

WO2016101646A1 - Access method and apparatus for ethernet virtual network

Info

Publication number: WO2016101646A1
Application number: PCT/CN2015/088460
Authority: WO
Inventors: 廖文奇
Original assignee: 华为技术有限公司
Priority date: 2014-12-22
Filing date: 2015-08-29
Publication date: 2016-06-30
Also published as: CN105791072A

Abstract

An access method for an Ethernet virtual network, comprising: receiving an address resolution protocol message sent by an accessed customer edge, acquiring a MAC address of the accessed customer edge according to the address resolution protocol message, and adding the MAC address into a pre-set MAC routing table; acquiring an Ethernet segment identifier of the accessed customer edge; exchanging an Ethernet segment route comprising the Ethernet segment identifier with one or more provider edges in the neighbourhood of the customer edge, and selecting a main designated forwarder and a backup designated forwarder according to the received Ethernet segment route; and regularly sending a sounding message to the accessed customer edge. In addition, also provided is an access apparatus for an Ethernet virtual network. The method and apparatus can shorten the time for the CE to recover the data transmission service when a link failure occurs in the Ethernet virtual network, thereby improving the reliability of the Ethernet virtual network.

Description

Ethernet virtual network access method and device

The present application claims priority to Chinese Patent Application No. 201410803549.4, entitled "Access Method and Apparatus for Ethernet Virtual Network", filed on December 22, 2014, the entire contents of which are incorporated herein by reference. In the application.

Technical field

The present invention relates to the field of communications technologies, and in particular, to an access method and device for an Ethernet virtual network, and a service recovery method and device for a user network edge device.

Background technique

Ethernet Virtual Network (EVN) is a Layer 2 Internetworking virtual private network based on Virtual eXtensible Local Area Network (VXLAN) tunnel (English: Virtual Private Network) , referred to as: VPN) technology. The EVN includes the carrier edge device (English: Provider Edge, PE for short) and the user network edge device (English: Customer Edge, referred to as CE, for convenience of description. The following uses PE to refer to the carrier edge device and uses CE. Refers to the user network edge device). As shown in Figure 1, PE1, PE2, and PE3 are user network edge devices. CE1, CE2, and CE3 are user network edge devices that access PE1, PE2, and PE3. A neighbor relationship and a virtual scalable LAN VXLAN tunnel (IP network) are established between PE1, PE2, and PE3. However, in the EVN network, the CE obtains the hardware address of the CE (English: Media Access Control, MAC for short) instead of routing information. As shown in Figure 1, PE1 obtains the MAC address of the accessed CE1 and is not the routing information of CE1. After PE1 obtains the MAC address of CE1, it can send it to PE2. The data packet sent by CE2 that is connected to PE2 can be forwarded to PE1 by PE2. Then, PE1 forwards it to CE1 according to the MAC address of CE1, thus implementing Layer 2 network. Interconnected virtual private network.

However, the inventors have found through research that the CE accessing the PE in the Ethernet virtual network in the conventional technology has at least the following problems:

In the conventional technology, after the CE accesses the PE, the PE is the designated forwarder of the CE. The data packets sent by the CE are forwarded by the PE as the designated forwarder, but the chain between the CE and the PE is used. Road fault When the data packet sent by the CE or the PE is unreachable, the CE needs to wait for a long time to select a new PE access and forward the data as the designated forwarder. Therefore, in the conventional technology, when a link failure occurs, the CE recovers the data transmission service for a long time, which results in insufficient reliability of the EVN network.

Summary of the invention

Based on this, it is necessary to provide an Ethernet virtual network access method that shortens the time when the CE recovers the data transmission service when a link failure occurs.

A first aspect of the present invention provides an access method of an Ethernet virtual network, including:

Receiving an address resolution protocol packet sent by the access user network edge device, obtaining a MAC address of the accessed user network edge device according to the address resolution protocol packet, and adding the MAC address to a preset MAC route In the table;

Obtaining an Ethernet segment identifier of the accessed user network edge device;

And transmitting, by the one or more carrier edge devices in the neighbor relationship, the Ethernet segment route including the identifier of the Ethernet segment, and electing the primary designated forwarder and the designated forwarder according to the received Ethernet segment route;

After being elected as the primary designated forwarder, the data packet sent by the accessed user network edge device is forwarded through the IP network according to the MAC routing table, and the probe is periodically sent to the accessed user network edge device. Text.

In a first possible implementation manner of the first aspect, the method further includes:

Receiving a MAC address advertisement route sent by the remote carrier edge device, obtaining an IP address of the remote carrier edge device and a MAC address of the remote user network edge device according to the MAC address advertisement route, and The obtained IP address and MAC address are added to the MAC routing table.

With reference to the first aspect and the first possible implementation manner of the first aspect, in a second possible implementation, the step of forwarding the data packet sent by the user network edge device by using the IP routing table according to the MAC routing table is further include:

Obtaining a MAC address of a remote user network edge device included in the data packet;

Locating, in the MAC routing table, an IP address of a remote edge operator's edge device that corresponds to a MAC address of the remote user network edge device;

Encapsulating the data packet into an IP network data packet, and sending the encapsulated IP network data packet to the remote operator edge device corresponding to the found IP address through the IP network, and After the carrier edge device of the terminal unpacks it, it forwards it to the remote user network edge device corresponding to the MAC address.

With reference to the first aspect and the first possible implementation manner of the first aspect, in a third possible implementation manner, the routing the primary designated forwarder and the specified forwarder according to the received Ethernet segment route, and is elected After the step of specifying the forwarder for the master, it also includes:

Receiving a data packet sent by the remote carrier edge device to determine whether it is a multicast packet, and if yes, excluding the operator selected as the designated forwarder when forwarding the data packet Edge device.

With reference to the first aspect, and the first possible implementation manner of the first aspect, in a fourth possible implementation, after the step of sending the probe packet to the access user network edge device, the step further includes:

Receiving a response packet returned by the accessed user network edge device, detecting whether the response packet times out, and if yes, notifying the remote user network edge device to the operator edge selected as the designated forwarder The device forwards data packets.

In the fifth possible implementation manner, in the fifth possible implementation manner, the step of electing the primary designated forwarder and the standby designated forwarder according to the received Ethernet segment route further includes:

Obtaining, according to the received Ethernet segment route, an IP address of the operator edge device corresponding to the Ethernet segment identifier of the accessed user network edge device;

The primary designated forwarder and the secondary designated forwarder are elected by comparing the sizes of the IP addresses.

In addition, it is also necessary to provide an Ethernet virtual network access device that shortens the time during which a CE recovers a data transmission service when a link failure occurs.

An access device for an Ethernet virtual network, comprising:

a routing table adding module, configured to receive an address resolution protocol packet sent by an access user network edge device, obtain a MAC address of the accessed user network edge device according to the address resolution protocol packet, and use the MAC address Add to the default MAC routing table;

An Ethernet segment identifier obtaining module, configured to acquire an Ethernet segment identifier of the accessed user network edge device;

Designate a forwarder election module for use with one or more carrier edge devices in their neighbor relationship Transmitting an Ethernet segment route that includes the identifier of the Ethernet segment, and electing a primary designated forwarder and a designated forwarder according to the received Ethernet segment route;

a data packet forwarding module, configured to forward, according to the MAC routing table, a data packet sent by the user network edge device that is accessed by the user according to the MAC routing table, and periodically send the data packet to the access device. The user network edge device sends a probe packet.

In combination with the first aspect and the first possible implementation manner of the first aspect, in a second possible implementation manner, the routing table adding module is further configured to receive a MAC address advertisement route sent by a remote carrier edge device, Obtaining, according to the MAC address advertisement route, an IP address of the remote operator edge device and a MAC address of the remote user network edge device, and adding the acquired IP address and MAC address to the MAC routing table. in.

In combination with the first aspect and the first possible implementation manner of the first aspect, in a third possible implementation, the data packet forwarding module is further configured to obtain a remote user network edge device included in the data packet. a MAC address; searching, in the MAC routing table, an IP address of a remote edge operator's edge device corresponding to a MAC address of the remote user network edge device; encapsulating the data packet into an IP address Network data packet, and the encapsulated IP network data packet is sent to the remote operator edge device corresponding to the found IP address through the IP network, and is solved by the remote carrier edge device. After the packet, the packet is forwarded to the remote user network edge device corresponding to the MAC address.

With reference to the first aspect and the first possible implementation manner of the first aspect, in a fourth possible implementation, the data packet forwarding module is further configured to receive a data packet sent by the remote operator edge device. And determining whether the packet is a multicast packet, and if yes, excluding the carrier edge device selected as the designated forwarder when forwarding the data packet.

With reference to the first aspect and the first possible implementation manner of the first aspect, in a fifth possible implementation, the apparatus further includes a forwarding link switching module, configured to receive the accessed user network edge device and return The response packet is sent to detect whether the response packet has timed out. If yes, the remote network edge device is notified to forward the data packet to the operator edge device selected as the designated forwarder.

In a sixth possible implementation manner, the specified forwarder election module is further configured to obtain an Ethernet segment of the user network edge device with the access according to the received Ethernet segment route. Standard The IP address of the corresponding carrier edge device is identified; the primary designated forwarder and the designated forwarder are elected by comparing the sizes of the IP addresses.

In addition, it is also necessary to provide a service recovery method for a user network edge device that shortens the time when the CE recovers the data transmission service when a link failure occurs.

A service recovery method for a user network edge device includes:

Obtaining a MAC address, and sending an address resolution protocol packet including the MAC address to two or more carrier edge devices, where the operator edge device is added to a corresponding MAC routing table;

Receiving, by the two or more carrier edge devices, an Ethernet segment route, and determining, according to the Ethernet segment route, an operator edge device that is a primary designated forwarder and a designated forwarder;

Obtaining a data packet, and sending the data packet to the operator edge device as the primary designated forwarder, and forwarding the data packet according to the MAC routing table;

The probe packet sent by the operator edge device that is the primary designated forwarder is detected, and if it times out, the data packet is sent to the operator edge device that is the designated forwarder and forwarded by the operator.

In addition, it is also necessary to provide a service recovery device for a user network edge device that shortens the time when the CE recovers the data transmission service when a link failure occurs.

A service recovery device for a user network edge device, comprising:

a MAC address issuing module, configured to obtain a MAC address, and send an address resolution protocol packet including the MAC address to two or more carrier edge devices, where the operator edge device adds to a corresponding MAC routing table. in;

And a specified forwarder determining module, configured to receive an Ethernet segment route sent by the two or more carrier edge devices, and determine, as the primary designated forwarder and the designated forwarder, the operator according to the Ethernet segment route Edge device

a data packet sending module, configured to: send the data packet to the operator edge device as the primary designated forwarder, and forward the data packet according to the MAC routing table;

And a forwarder switching module, configured to detect the probe packet sent by the operator edge device that is the primary designated forwarder, and if the timeout occurs, send the data packet to the edge of the operator that is the designated forwarder. Equipment, And forwarded by it.

In the above-mentioned Ethernet virtual network access method and device, and the user network edge device service recovery method and device, when the user network edge device accesses the Ethernet virtual network, it is not only accessing a single carrier edge device but Enter two or more carrier edge devices, and all the operator edge devices accessing the user network edge device perform election, determine the identity of each primary designated forwarder and the specified forwarder, and then be the designated forwarder. The operator edge device forwards the data packet of the user network edge device, and the carrier edge device that is the primary designated forwarder and the user network edge device detect the reachability state of the data packet of the other party through the probe packet. When the state becomes unreachable due to a link problem or other reasons, the user network edge device can quickly switch to the standby forwarding link to forward data packets without waiting for a long time, so that the data transmission service of the user network edge device The recovery time is greatly shortened, thereby improving the reliability of the EVN network.

DRAWINGS

FIG. 1 is a schematic diagram of networking of an Ethernet virtual network;

2 is a flowchart of an Ethernet virtual network access method according to an embodiment of the present invention;

3 is a schematic diagram of networking of an Ethernet virtual network in which a CE accesses multiple PEs according to an embodiment of the present invention;

4 is a schematic diagram of networking for establishing a neighbor relationship between PEs through a route reflector according to an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a packet for a PE to encapsulate a data packet sent by a CE according to an embodiment of the present invention;

FIG. 6 is a schematic diagram of a PE forwarding a multicast packet as a primary designated forwarder according to an embodiment of the present invention;

FIG. 7 is a schematic diagram of a process of performing data forwarding link switching between PEs according to an embodiment of the present invention; FIG.

FIG. 8 is a schematic diagram of a process of re-selecting a designated forwarder to forward data as a CE according to an embodiment of the present invention; FIG.

FIG. 9 is a schematic diagram of an Ethernet virtual network access device according to another embodiment of the present invention; FIG.

FIG. 10 is a flowchart of a service recovery method of a user network edge device according to another embodiment of the present invention;

FIG. 11 is a schematic diagram of a service recovery apparatus of a user network edge device according to another embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clear and complete in the following with reference to the accompanying drawings in the embodiments of the present invention. It is apparent that the described embodiments are only a part of the embodiments of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In order to reduce the time for the CE to recover the data transmission service when the link is faulty, a mechanism for the CE to access the PE is proposed. The mechanism consists of two parts, including the access method of the Ethernet virtual network running on the PE. And a service recovery method of the user network edge device running on the foregoing CE. The access method of the above Ethernet virtual network and the service recovery method of the user network edge device may all depend on a computer program, and the computer program may run on a computer system conforming to the Von Neumann system.

In one embodiment, specifically, the method is as shown in FIG. 2, including:

Step S102: Receive an address resolution protocol packet sent by an access user network edge device (CE), obtain a MAC address of the accessed user network edge device (CE) according to the address resolution protocol packet, and add the MAC address to the MAC address. The default MAC routing table.

As shown in Figure 3, CE1 is connected to two edge devices of PE1 and PE2, and CE2 is connected to PE3. After establishing a physical link with PE1 and PE2, CE1 broadcasts the address resolution protocol (ARP) packet to broadcast the MAC address of CE1 to PE1 and PE2. PE1 and PE2 can obtain the MAC address of CE1. Alternatively, after establishing a physical link with PE1 and PE2, CE1 also receives the ARP packet broadcasted by PE1 or PE2, and then responds to the MAC address of CE1 by passively responding to the ARP packet, so that PE1 and PE2 obtain CE1. MAC address. Similarly, PE3 can also obtain the MAC address of CE2.

In addition, in this embodiment, the method further includes receiving a MAC address advertisement route sent by the remote operator edge device, and obtaining the IP address of the remote operator edge device and the remote user network edge according to the MAC address advertisement route. The MAC address of the device, and add the obtained IP address and MAC address to the MAC routing table.

For example, as shown in Figure 3, if the MAC address of CE1 obtained by PE1 is MAC_1, the Ethernet segment route (ESR) can be sent to PE2 and PE3 in the neighbor relationship. Obtain the MAC_1 and the IP address of PE1 (in the application scenario corresponding to Figure 3, PE1 The IP address is IP1) and is flooded to PE2 and PE3. After receiving the Ethernet segment route, PE2 and PE3 can add MAC_1 and IP1 to the routing table.

After both PE1 and PE3 receive the Ethernet segment route sent by the peer, the MAC routing table entry shown in Figure 3 exists in the MAC routing table stored on the PE1. The MAC address table stored in the PE1 records the IP address of the next hop forwarded by the MAC_1 and the MAC_2. For example, if the destination MAC address of the received data packet is MAC_2, the MAC routing entry is If the IP address of the next hop forwarded by MAC_2 is "IP3", the data packet is forwarded to the PE3 whose IP address is IP3. If the destination MAC address of the received data packet is MAC_1, the MAC address is The IP address of the next hop forwarded by MAC_2 in the entry is "ETH", which means that the next hop will be forwarded directly through the Layer 2 Ethernet link, that is, it is forwarded to the MAC address as MAC_1 through the Layer 2 Ethernet link. CE1.

It should be noted that the MAC routing table on the PE may also include a virtual local area network (VLAN) identifier. You can configure the VLAN IDs for the PEs and CEs in advance. In the EVN network, the same VLAN ID is used. Some PEs or CEs can perform VLAN mapping and extended VLAN identification. Therefore, the VLAN IDs of the two devices are different but correspond to each other. In this application scenario, data forwarding can be performed between the PE and the CE of the same VLAN ID and between the PE and the PE corresponding to the same VLAN ID.

As shown in Figure 3, the VLAN IDs of CE1 and PE1 can be set to 100. After CE1 is connected to PE1, CE1 configures the port connected to PE1 as a trusted port. The trusted port stores the trusted MAC address corresponding to VLAN ID 100. A list of addresses. The list of trusted MAC addresses is generated by receiving an Ethernet segment route sent by PE1. PE1 sends the MAC entry in its MAC routing table to CE1 through the Ethernet segment route. CE1 adds the received MAC address corresponding to the same VLAN ID to the trusted MAC address list.

For example, in Figure 3, if the VLAN IDs of CE1 and CE2 are both configured to be 100, the corresponding trusted MAC address list on the trusted port connected to CE1 and CE1 contains the MAC address of CE2, and CE1 can use CE2 as The destination of the data transmission; if the VLAN ID of the CE2 is not configured as 100 (the PE can be configured with multiple VLAN IDs, and the MAC address of the CE2 is also included in the MAC routing table), the MAC address of the CE2 will not be added to the CE1. The trusted MAC address list corresponding to the trusted port connected to the other PE1 does not cause data transmission between CE1 and CE2.

Step S104: Obtain an Ethernet segment identifier of the accessed user network edge device.

After the PE accesses the CE, a unique Ethernet segment identifier (English: Ethernet Segment Identifier, ESI) can be defined for the connection to the CE. When different PEs access the same CE, they are respectively defined by the connection with the CE. The Ethernet segment identifiers are the same. As shown in Figure 3, CE1 is connected to both PE1 and PE2. The Ethernet segment identifier assigned by PE1 to CE1 is ESI1, and the Ethernet segment identifier assigned by PE2 to CE1 is also ESI1. When CE2 is connected to PE3, the Ethernet segment identifier assigned by PE3 to the CE3 connection is ESI2 for distinguishing.

In step S106, the Ethernet segment route including the Ethernet segment identifier is mutually exchanged with one or more carrier edge devices in the neighbor relationship, and the primary designated forwarder and the standby designated forwarding are elected according to the received Ethernet segment route. By.

In an EVN network, PEs need to be configured to be fully connected so that all PEs are in a neighbor relationship. In order to facilitate the full connection configuration, a route reflector (English: Route Reflector, RR for short) can be configured. The RR discovers and receives a connection based on the Border Gateway Protocol (BGP) initiated by other PEs in the EVN to establish a client list. If the RR receives a route sent by a PE, it forwards it to all other PEs in the client list. That is to say, PEs can form a fully connected network through RRs to establish neighbor relationships.

As shown in Figure 4, PE1, PE2, and PE3 are connected to each other through the RR. When CE1 is connected to both PE1 and PE2, and CE2 is connected to PE3, PE1 and PE2 are connected to CE1. The same ESI: ESI1 was connected; and the ESI assigned to CE2 by PE3 was: ESI2. PE1, PE2, and PE3 exchange Ethernet segments with each other through the RR. The route contains ESI information. PE1, PE2, and PE3 can determine that the corresponding ESI1 is PE1 and PE2, and the corresponding ESI2 is PE3.

Preferably, as shown in FIG. 4, a list of terminals corresponding to ESI1 can be established on the PE1, and the list includes the identifiers of the PE1 and the PE2 (for example, the information identifying the PE such as the IP address), and the same is established on the PE2. A list of terminals corresponding to the ESI. The list also contains the identifiers of PE1 and PE2. PE1 and PE2 can elect the primary designated forwarder and the specified forwarder corresponding to ESI1 according to the identifier included in the terminal list.

Preferably, the step of electing the primary designated forwarder and the standby designated forwarder according to the received Ethernet segment route further includes:

Obtaining an Ethernet segment identifier pair with the accessed user network edge device according to the received Ethernet segment route The IP address of the carrier's edge device; the primary designated forwarder and the specified forwarder are elected by comparing the size of the IP address.

That is, in FIG. 4, the IP addresses of PE1 and PE2 are used as the respective identifiers in the terminal list corresponding to ESI1 stored on PE1 and PE2, and then the PE with the smallest IP address can be elected as the primary designated forwarder. The PE election corresponding to the remaining IP addresses is the designated forwarder. For PE1, it is only necessary to determine whether the IP address of the PE1 itself is the smallest IP address in the terminal list, and it can be determined whether the PE1 itself is elected as the designated forwarder. If the PE1 determines that the IP address is not the same, If the IP address is the smallest IP address in the terminal list, PE1 can determine that PE1 is elected as the designated forwarder.

Step S108: After being elected as the primary designated forwarder, forward the data packet sent by the user network edge device that is accessed by the IP network according to the MAC routing table, and periodically send the probe packet to the accessed user network edge device.

Specifically, the step of forwarding the data packet sent by the user network edge device by using the IP routing table according to the MAC routing table further includes:

Obtain the MAC address of the remote user network edge device included in the data packet.

The MAC routing table looks up the IP address of the remote carrier's edge device that it accesses corresponding to the MAC address of the remote user network edge device.

Encapsulating the data packet into an IP network data packet, and sending the encapsulated IP network data packet to the remote carrier edge device corresponding to the found IP address through the IP network, and the remote carrier After the edge device unpacks it, it forwards it to the remote user network edge device corresponding to the MAC address.

Referring to FIG. 3, in FIG. 3, CE1 and CE2, and PE1, PE2, and PE3 are all assigned the same VLAN identifier, and PE1 is selected as the primary designated forwarder of CE1, and PE2 is selected as the designated forwarder of CE2. .

The data packet sent by CE1 to CE2 (Layer 2 Ethernet data packet) will be forwarded to PE1 through the link between CE1 and PE1. After receiving the data packet, PE1 sends the packet according to the data packet. The remote user network changes the MAC address of the edge device, that is, the MAC address of the CE2, and the MAC address of the CE1 that sends the data packet, and then encapsulates the data packet into a data packet of the VxLan IP network, and queries the MAC address. If the routing table obtains the IP address of the next hop to be the IP address of the PE3, the encapsulated data packet is sent to the PE3 through the IP network.

The format of the data packet of the encapsulation may be as shown in FIG. 5, and the VxLAN protocol header (including the “original Layer 2 data packet” part in FIG. 5) needs to be added to the received CE1 data packet (including the “original Layer 2 data packet” part in FIG. 5). VLAN identification and other information), and then add the IP protocol header (including the IP address of PE1 and the IP address of PE3), plus the prohibition fragmentation. As shown in FIG. 5, the fragment identification identifies the MAC address of the CE3 that contains the target received data message (ie, the DMAC data segment in the fragmentation identifier in FIG. 5) and the MAC address of the CE1 that sends the data packet (ie, in FIG. 5). The SMAC data segment in the fragmentation identifier is prohibited, and the additional information (ie, the TYPE data segment in the fragmentation identifier is prohibited in FIG. 5).

After receiving the encapsulated data packet, the PE3 can obtain the MAC address of the device that is sent by the destination of the data packet to the CE3 by querying the data packet. If the address of the one-hop forwarding is an Ethernet network (that is, the port connected to CE3), the data segment of the original Layer 2 data packet in the encapsulated data packet is extracted and sent to CE3.

After receiving the data packet, the trusted port corresponding to PE3 on CE3 is configured to determine that the device that originated the data packet is CE1. If the MAC address of CE1 is in the list of trusted MAC addresses, the data packet is successfully received.

In this embodiment, if the CE1 sends a multicast packet to the PE1 (after being elected as the primary designated forwarder), the PE1 forwards the multicast to the MAC routing entry corresponding to the multicast packet according to the MAC routing table. A copy of the message (still required to be encapsulated).

After receiving the data packet sent by the remote carrier edge device, the primary designated forwarder determines whether it is a multicast packet, and if so, excludes the selected forwarder when forwarding the data packet. Carrier edge device.

As shown in Figure 6, if the data packet sent by PE3 to PE1 is a multicast packet, PE1, which is the primary designated forwarder of CE1, rejects the designated forwarder as CE1 after receiving the multicast packet. PE2, that is, does not forward data packets to PE2, thus preventing the formation of a loop of PE3-PE1-PE2-PE3.

In this embodiment, after the PE1 is elected as the primary designated forwarder of the CE1, the probe packet needs to be sent to the CE1 periodically. The time can be set to a short period of time, such as 10ms. It is used to check whether the link between CE1 and PE1 is clear. That is, CE1 and PE1 can determine whether the other party is reachable.

For the PE, after the step of sending a probe packet to the user edge device of the access user, the PE can be connected. And receiving the response packet returned by the user network edge device, and detecting whether the response packet times out. If yes, the remote network edge device is notified to forward the data packet to the operator edge device selected as the designated forwarder.

As shown in Figure 7, PE1 can send a probe packet to CE1 every 10 ms and detect whether it receives the response packet returned by CE1. If the threshold is exceeded, for example, if CE1 is not detected, it is not detected. The response packet can be used to determine that the CE1 is in the unreachable state of the data packet, and can notify the PE3 that is in the neighbor relationship, that is, the Ethernet segment that sends the MAC address of the CE1 to the PE3. After receiving the Ethernet segment route of the MAC address of the CE1, the PE3 can delete the MAC address entry of the IP address of the CE1 in the MAC routing table, but still retain the MAC address of the CE1. The MAC address entry of the IP address. Therefore, the data packet sent by CE2 to CE1 is forwarded to PE2 through PE3, and then forwarded to CE1 by PE2. Therefore, the link between the CE1 and the PE1 is in a state in which the data packet is unreachable, and the data is forwarded to the CE1 through the PE2 that is the designated forwarder. Improve the reliability of the EVN network.

For the CE, after detecting the timeout of the probe packet sent by the operator's edge device as the primary designated forwarder, the data packet can be sent to and forwarded by the operator edge device as the designated forwarder.

In the above example, PE1, which is the primary designated forwarder, can send probe packets to CE1 every 10 ms. CE1 detects whether it is received. If the preset duration threshold is exceeded, for example, if it is not detected within 30 ms, PE1 can be determined as data. The packet is unreachable. CE1 can send data packets to PE2 as the designated forwarder and forward it by PE2. At the same time, CE1 can find the trusted port connected to PE1, obtain the trusted MAC address corresponding to the VLAN ID of the trusted port, and then delete it. Then CE1 does not perform data transmission with PE1. Therefore, the probe packet sent by the PE as the primary designated forwarder can also quickly detect that the link between CE1 and PE1 is in the unreachable state of the data packet, and switch to the designated forwarder in time. The PE2 forwards the data, which greatly shortens the time for the CE1 to recover the data transmission service and improves the reliability of the EVN network.

In this embodiment, in order to shorten the time for the CE to recover the data transmission service when the link is faulty, an access device of the Ethernet virtual network corresponding to the access method of the foregoing Ethernet virtual network is also provided. As shown in FIG. 8, the device includes a routing table adding module 102, an Ethernet segment identifier obtaining module 104, a designated forwarder election module 106, and a data packet forwarding module 108, where:

The routing table adding module 102 is configured to receive an address resolution protocol packet sent by the user network edge device that is accessed, obtain the MAC address of the accessed user network edge device according to the address resolution protocol packet, and use the MAC address. The address is added to the preset MAC routing table;

The Ethernet segment identifier obtaining module 104 is configured to obtain an Ethernet segment identifier of the accessed user network edge device.

The forwarder election module 106 is configured to exchange the Ethernet segment route including the Ethernet segment identifier with one or more carrier edge devices in the neighbor relationship, and elect the primary designation according to the received Ethernet segment route. Forwarder and standby forwarder;

The data packet forwarding module 108 is configured to forward, according to the MAC routing table, the data packet sent by the accessed user network edge device according to the MAC routing table, and periodically send the data packet to the terminal after being elected as the primary designated forwarder. The incoming user network edge device sends a probe packet.

In this embodiment, the routing table adding module 102 is further configured to receive a MAC address advertisement route sent by the remote operator edge device, obtain an IP address of the remote carrier edge device according to the MAC address advertisement route, and The MAC address of the remote user network edge device, and adds the obtained IP address and MAC address to the MAC routing table.

In this embodiment, the data packet forwarding module 108 is further configured to obtain a MAC address of a remote user network edge device included in the data packet, and search for the remote user network in the MAC routing table. The IP address of the edge device is the IP address of the remote edge carrier device to which it is connected; the data packet is encapsulated into an IP network data packet, and the encapsulated IP network data packet is sent to the IP network through the IP network. The remote carrier edge device corresponding to the discovered IP address is unpacked by the remote carrier edge device and forwarded to the remote user network edge device corresponding to the MAC address.

In this embodiment, the data packet forwarding module 108 is further configured to receive the data packet sent by the remote operator edge device, and determine whether it is a multicast packet, and if yes, forward the data packet. The operator edge device selected as the designated forwarder is excluded.

In this embodiment, as shown in FIG. 8, the access device of the Ethernet virtual network further includes a forwarding link switching module 110, configured to receive a response packet returned by the accessed user network edge device, and detect the response. Whether the packet times out, if yes, notifying the remote user network edge device to the edge of the operator selected as the designated forwarder The device forwards data packets.

In this embodiment, the designated forwarder election module 106 is further configured to obtain, according to the received Ethernet segment route, an IP address of the operator edge device corresponding to the Ethernet segment identifier of the accessed user network edge device; The size of the IP address elects the primary designated forwarder and the alternate designated forwarder.

As described above, in order to reduce the time for the CE to recover the data transmission service when the link is faulty, the foregoing mechanism for the CE to access the PE includes the service recovery method of the user network edge device running on the foregoing CE. . The operation of the method may depend on a computer program that can run on a computer system that conforms to the von Neumann system. The computer system can be a router device that acts as a CE in the EVN network.

Specifically, as shown in FIG. 9, the method includes:

In step S202, the MAC address is obtained, and the address resolution protocol packet including the MAC address is sent to the two or more carrier edge devices, and is added by the operator edge device to the respective MAC routing table.

In addition, as shown in FIG. 3, if the MAC address of the CE1 obtained by the PE1 is MAC_1, the Ethernet segment route (ESR) can be sent to the PE2 and the PE3 in the neighbor relationship. The IP address of the obtained MAC_1 and PE1 (in the application scenario corresponding to FIG. 3, the IP address of PE1 is IP1) is diffused to PE2 and PE3. After receiving the Ethernet segment route, PE2 and PE3 can add MAC_1 and IP1 to the routing table.

After both PE1 and PE3 receive the Ethernet segment route sent by the peer, the MAC routing table entry shown in Figure 3 exists in the MAC routing table stored on the PE1. The MAC address table stored in the PE1 records the IP address of the next hop forwarded by the MAC_1 and the MAC_2, for example, the destination MAC address of the received data packet. If the IP address of the next hop corresponding to MAC_2 in the MAC routing entry is "IP3", the data packet is forwarded to the PE3 whose IP address is IP3. If the received data packet is received, The destination MAC address is MAC_1. The IP address of the next hop corresponding to MAC_2 in the MAC routing entry is ETH. This means that the next hop will be forwarded directly through the Layer 2 Ethernet link, that is, through Layer 2 Ethernet. The network link is forwarded to CE1 with MAC address MAC_1.

Step S204: Receive an Ethernet segment route sent by two or more carrier edge devices, and determine, as the primary designated forwarder and the secondary designated forwarder, the operator edge device according to the Ethernet segment route.

In an EVN network, PEs need to be configured to be fully connected so that all PEs are in a neighbor relationship. In order to facilitate the full connection configuration, a route reflector (English: Route Reflector, RR for short) can be configured. The RR discovers and receives a connection based on the Border Gateway Protocol (BGP) initiated by other PEs in the EVN to establish a client list. If the RR receives a route sent by a PE, it forwards it to All other PEs in this client list. That is to say, PEs can form a fully connected network through RRs to establish neighbor relationships.

Preferably, the PE obtains an IP address of the operator edge device corresponding to the Ethernet segment identifier of the accessed user network edge device according to the received Ethernet segment route; and elects the primary designated forwarder by comparing the size of the IP address. And specify the forwarder.

That is, in FIG. 4, the IP addresses of PE1 and PE2 are used as the respective identifiers in the terminal list corresponding to ESI1 stored on PE1 and PE2, and then the PE with the smallest IP address can be elected as the primary designated forwarder. The PE election corresponding to the remaining IP addresses is the designated forwarder. For PE1, it is only necessary to determine whether the IP address of the PE1 itself is the smallest IP address in the terminal list, and it can be determined whether the PE1 itself is elected as the designated forwarder. If the PE1 determines that the IP address is not the same, If the IP address of the terminal list is the smallest, the PE1 can determine that the PE1 itself is elected as the designated forwarder. Therefore, the CE1 can send the Ethernet segment route notification CE1 to the primary designated forwarder.

In step S206, the data packet is obtained, and the data packet is sent to the operator edge device as the primary designated forwarder, and the data packet is forwarded according to the MAC routing table.

The data packet sent by CE1 to CE2 (Layer 2 Ethernet data packet) will be forwarded to PE1 through the link between CE1 and PE1. After receiving the data packet, PE1 sends the packet according to the data packet. Remote The user network changes the MAC address of the edge device, that is, the MAC address of the CE2, and the MAC address of the CE1 that sends the data packet, and then encapsulates the data packet into a data packet of the VxLan IP network, and obtains the MAC routing table by querying the MAC routing table. If the IP address of the next hop is the IP address of the PE3, the encapsulated data packet is sent to the PE3 through the IP network.

Step S208, detecting the probe packet sent by the operator edge device that is the primary designated forwarder, and if it times out, sending the data packet to the operator edge device that is the designated forwarder, and Forward.

After detecting the timeout of the probe packet sent by the edge device of the carrier that is the primary designated forwarder, the CE can send the data packet to the edge device of the carrier that is the designated forwarder and forward it.

For example, PE1, which is the primary designated forwarder, can send probe packets to CE1 every 10 ms. CE1 detects whether If it is received, if the preset duration threshold is exceeded, for example, if it is not detected within 30 ms, it may be determined that PE1 is in a data packet unreachable state. CE1 can send data packets to PE2 as the designated forwarder and forward it by PE2. At the same time, CE1 can find the trusted port connected to PE1, obtain the trusted MAC address corresponding to the VLAN ID of the trusted port, and then delete it. Then CE1 does not perform data transmission with PE1. Therefore, the probe packet sent by the PE as the primary designated forwarder can also quickly detect that the link between CE1 and PE1 is in the unreachable state of the data packet, and switch to the designated forwarder in time. The PE2 forwards the data, which greatly shortens the time for the CE1 to recover the data transmission service and improves the reliability of the EVN network.

In this embodiment, in order to shorten the time for the CE to recover the data transmission service when the link is faulty, a service recovery device of the user network edge device corresponding to the foregoing service recovery of the user network edge device is also provided. As shown in FIG. 8, the apparatus includes a MAC address issuing module 202, a designated forwarder determining module 204, a data packet sending module 206, and a designated forwarder switching module 208, wherein:

The MAC address issuing module 202 is configured to obtain a MAC address, and send an address resolution protocol packet including the MAC address to two or more carrier edge devices, where the carrier edge device adds the MAC address to the MAC address. In the table;

The designated forwarder determining module 204 is configured to receive an Ethernet segment route sent by the two or more carrier edge devices, and determine, as the primary designated forwarder and the designated forwarder, according to the Ethernet segment route. Edge device

The data packet sending module 206 is configured to: obtain the data packet, and send the data packet to the operator edge device that is the primary designated forwarder, and forward the data packet according to the MAC routing table;

The forwarder switching module 208 is configured to detect the probe packet sent by the operator edge device that is the primary designated forwarder, and if the timeout occurs, send the data packet to the operator that is the designated forwarder. The edge device is forwarded by it.

In the above-mentioned Ethernet virtual network access method and device, and the user network edge device service recovery method and device, when the user network edge device accesses the Ethernet virtual network, it is not only accessing a single carrier edge device but Enter two or more carrier edge devices, all carriers that access the user's network edge device The edge device performs election to determine the identity of the primary designated forwarder and the designated forwarder, and then forwards the data packet of the user network edge device by the carrier edge device that is the primary designated forwarder, and operates as the primary designated forwarder. The edge device of the user and the edge device of the user network detect each other's data packet reachability status through the probe packet. When the state becomes unreachable due to a link problem or other reasons, the user network edge device can quickly switch. The forwarding forwarding data packet is forwarded to the forwarding link without waiting for a long time, so that the recovery time of the data transmission service of the user network edge device is greatly shortened, thereby improving the reliability of the EVN network.

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The above-mentioned embodiments are merely illustrative of several embodiments of the present invention, and the description thereof is more specific and detailed, but is not to be construed as limiting the scope of the invention. It should be noted that a number of variations and modifications may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of the invention should be determined by the appended claims.

Claims

An access method for an Ethernet virtual network, including:

Receiving an address resolution protocol packet sent by the access user network edge device, obtaining a MAC address of the accessed user network edge device according to the address resolution protocol packet, and adding the MAC address to a preset MAC route In the table;

Obtaining an Ethernet segment identifier of the accessed user network edge device;

And transmitting, by the one or more carrier edge devices in the neighbor relationship, the Ethernet segment route including the identifier of the Ethernet segment, and electing the primary designated forwarder and the designated forwarder according to the received Ethernet segment route;

After being elected as the primary designated forwarder, the data packet sent by the accessed user network edge device is forwarded through the IP network according to the MAC routing table, and the probe is periodically sent to the accessed user network edge device. Text.
The method for accessing an Ethernet virtual network according to claim 1, wherein the method further comprises:

Receiving a MAC address advertisement route sent by the remote carrier edge device, obtaining an IP address of the remote carrier edge device and a MAC address of the remote user network edge device according to the MAC address advertisement route, and The obtained IP address and MAC address are added to the MAC routing table.
The access method of the Ethernet virtual network according to claim 2, wherein the step of forwarding the data packet sent by the user network edge device by using the IP routing table according to the MAC routing table further includes:

Obtaining a MAC address of a remote user network edge device included in the data packet;

Locating, in the MAC routing table, an IP address of a remote edge operator's edge device that corresponds to a MAC address of the remote user network edge device;

Encapsulating the data packet into an IP network data packet, and sending the encapsulated IP network data packet to the remote operator edge device corresponding to the found IP address through the IP network, and After the carrier edge device of the terminal unpacks it, it forwards it to the remote user network edge device corresponding to the MAC address.
The access method of the Ethernet virtual network according to claim 2, wherein the step of electing the primary designated forwarder and the designated forwarder according to the received Ethernet segment route and being elected as the primary designated forwarder It also includes:

Receiving a data packet sent by the remote carrier edge device to determine whether it is a multicast packet, and if yes, excluding the operator selected as the designated forwarder when forwarding the data packet Edge device.
The access method of the Ethernet virtual network according to claim 2, wherein the step of sending the probe packet to the user network edge device of the access network after the step further comprises:

Receiving a response packet returned by the accessed user network edge device, detecting whether the response packet times out, and if yes, notifying the remote user network edge device to the operator edge selected as the designated forwarder The device forwards data packets.
The access method of the Ethernet virtual network according to claim 1, wherein the step of electing the primary designated forwarder and the designated forwarder according to the received Ethernet segment route further includes:

Obtaining, according to the received Ethernet segment route, an IP address of the operator edge device corresponding to the Ethernet segment identifier of the accessed user network edge device;

The primary designated forwarder and the secondary designated forwarder are elected by comparing the sizes of the IP addresses.
An access device for an Ethernet virtual network, comprising:

a routing table adding module, configured to receive an address resolution protocol packet sent by an access user network edge device, obtain a MAC address of the accessed user network edge device according to the address resolution protocol packet, and use the MAC address Add to the default MAC routing table;

An Ethernet segment identifier obtaining module, configured to acquire an Ethernet segment identifier of the accessed user network edge device;

The forwarder election module is configured to exchange the Ethernet segment route including the Ethernet segment identifier with one or more carrier edge devices in the neighbor relationship, and elect the primary designated forwarding according to the received Ethernet segment route. And the designated forwarder;

a data packet forwarding module, configured to forward, according to the MAC routing table, a data packet sent by the user network edge device that is accessed by the user according to the MAC routing table, and periodically send the data packet to the access device. The user network edge device sends a probe packet.
The access device of the Ethernet virtual network according to claim 7, wherein the routing table adding module is further configured to receive a MAC address advertisement route sent by the remote operator edge device, and advertise the route according to the MAC address. Obtaining the IP address of the remote carrier edge device and the remote user network edge device The MAC address is added to the MAC routing table by the obtained IP address and MAC address.
The access device of the Ethernet virtual network according to claim 8, wherein the data packet forwarding module is further configured to acquire a MAC address of a remote user network edge device included in the data packet; The MAC routing table searches for the IP address of the operator edge device of the remote end that corresponds to the MAC address of the remote user network edge device; encapsulates the data packet into an IP network data packet, and The encapsulated IP network data packet is sent to the remote operator edge device corresponding to the found IP address through the IP network, and is unpacked by the remote carrier edge device, and then forwarded to the The remote user network edge device corresponding to the MAC address.
The access device of the Ethernet virtual network according to claim 8, wherein the data packet forwarding module is further configured to receive a data packet sent by the remote operator edge device, and determine whether it is a group. The broadcast message, if yes, excludes the operator edge device selected as the designated forwarder when forwarding the data message.
The access device of the Ethernet virtual network according to claim 8, wherein the device further comprises a forwarding link switching module, configured to receive a response packet returned by the accessed user network edge device, and detect the location The response packet is timed out. If yes, the remote network edge device is notified to forward the data packet to the operator edge device selected as the designated forwarder.
The access device of the Ethernet virtual network according to claim 7, wherein the designated forwarder election module is further configured to acquire an Ethernet network with the accessed user network edge device according to the received Ethernet segment route. The IP address of the carrier edge device corresponding to the segment identifier; the primary designated forwarder and the specified forwarder are elected by comparing the sizes of the IP addresses.
A service recovery method for a user network edge device includes:

Obtaining a MAC address, and sending an address resolution protocol packet including the MAC address to two or more carrier edge devices, where the operator edge device is added to a corresponding MAC routing table;

Receiving, by the two or more carrier edge devices, an Ethernet segment route, and determining, according to the Ethernet segment route, an operator edge device that is a primary designated forwarder and a designated forwarder;

Obtaining a data packet, and sending the data packet to the operator edge device as the primary designated forwarder, and forwarding the data packet according to the MAC routing table;

Detecting the probe packet sent by the operator edge device that is the primary designated forwarder, if it times out, The data packet is sent to and forwarded by the operator edge device as the designated forwarder.
A service recovery device for a user network edge device, comprising:

a MAC address issuing module, configured to obtain a MAC address, and send an address resolution protocol packet including the MAC address to two or more carrier edge devices, where the operator edge device adds to a corresponding MAC routing table. in;

And a specified forwarder determining module, configured to receive an Ethernet segment route sent by the two or more carrier edge devices, and determine, as the primary designated forwarder and the designated forwarder, the operator according to the Ethernet segment route Edge device

a data packet sending module, configured to: send the data packet to the operator edge device as the primary designated forwarder, and forward the data packet according to the MAC routing table;

And a forwarder switching module, configured to detect the probe packet sent by the operator edge device that is the primary designated forwarder, and if the timeout occurs, send the data packet to the edge of the operator that is the designated forwarder. The device is forwarded by it.