WO2016188201A1

WO2016188201A1 - Packet processing method and device

Info

Publication number: WO2016188201A1
Application number: PCT/CN2016/076535
Authority: WO
Inventors: 林宁
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-05-26
Filing date: 2016-03-16
Publication date: 2016-12-01
Also published as: CN106302143A; CN106302143B

Abstract

Provided are a packet processing method and device. The method comprises: receiving, by a forwarding apparatus, a layer 3 forwarded packet; and processing, by the forwarding apparatus and at least according to a pre-configured virtual local area network (vlan) tag keeping option, the packet, wherein the keeping option is configured to indicate whether to keep the original user vlan tag carried in the packet. The present invention addresses the problem existing in the related art of the loss of a carried original user vlan tag during layer 3 forwarding of a packet, and ensures packet integrity of the carried original user vlan tag with implementation of layer 3 forwarding of the packet.

Description

Message processing method and device

Technical field

The present invention relates to the field of communications, and in particular to a packet processing method and apparatus.

Background technique

In general, the virtual local area network (VLAN) security function QINQ message is applied to the number of vlans. When the private network vlan and the public network vlan conflict, the two-layer virtual LAN label vlan tag is used to distinguish The vlan tag of the private network of the user side of the packet and the vlan tag of the public network of the network side are forwarded by the outer vlan tag on the public network when the network forwards the packet, and the inner vlan tag of the private network side is public. When the network forwards down to the private network, it is used to distinguish different service traffic.

However, when the device performs Layer 3 forwarding, in general, when the QINQ packet is forwarded through Layer 3, the inner vlan tag of the packet will be stripped off at the forwarding exit because the chip does not recognize the packet. Layer vlan tag. Therefore, the vlan tag attribute of the packet on the egress port is determined by the vlan tag attribute of the egress interface. The forwarding mode of the internal user of the QINQ packet is discarded when the Layer 3 forwarding is performed.

Therefore, the QINQ packet in the related art is generally applied in a Layer 2 network or a Layer 2 Virtual Private Network (VPN) network for forwarding.

The process of forwarding QINQ packets by devices is as follows:

1. The user-side packet carries the user-side vlan tag C-vlan to enter the public network.

2. The public network forwards the packet to the public network side vlan tag P-vlan in the public network.

3. At the destination private network side, the vlan tag P-vlan on the public network side is stripped off, and the user side vlan tag C-vlan is used for forwarding.

Therefore, in the current technology, the public network side forwarding of the QINQ message is generally performed in the Layer 2 network or the Layer 2 VPN network. Generally, once the Layer 3 forwarding is performed, the private network vlan on the user side is performed. The tag (that is, the vlan tag originally carried by the user) is lost. Therefore, the current general QINQ reference does not perform Layer 3 forwarding on the public network side. When the Layer 3 forwarding of the packet is performed in the related art, the original vlan tag carried by the user is lost.

When the Layer 3 forwarding of packets is performed in the related art, the original vlan tag carried by the user is lost. Currently, no effective solution has been proposed.

Summary of the invention

The invention provides a message processing method and device, which can solve the problem that the vlan tag originally carried by the user is lost when the three-layer forwarding of the packet is performed in the related art.

According to an aspect of the present invention, a packet processing method is provided, including: a forwarding device receives a Layer 3 forwarded packet; and the forwarding device pairs the packet according to at least a pre-configured virtual local area network label vlan tag retention option. Processing is performed, wherein the hold option is used to indicate that the vlan tag originally carried by the user in the message is maintained.

Optionally, the forwarding, by the forwarding device, processing the packet according to the pre-configured virtual local area network label vlan tag holding option, the forwarding device processing the packet according to the holding option and the translation policy, where The translation policy is used to indicate that the public network side P-vlan tag in the message is processed.

Optionally, the translation policy is set on the forwarding device according to a location where the forwarding device is located in the network.

Optionally, in the case that the forwarding device is a device that forwards a packet from the user side to the network side, the forwarding device processes the packet according to the pre-configured vlan tag retention option and the translation policy, including: And adding the P-vlan to the message according to the translation policy, while maintaining the vlan tag originally carried by the user in the packet.

Optionally, in the case that the forwarding device is a device that forwards a packet internally, the forwarding device processes the packet according to the pre-configured vlan tag retention option and the translation policy, including: The P-vlan in the packet is replaced according to the translation policy, while the vlan tag originally carried by the user in the packet is maintained.

Optionally, in the case that the forwarding device is a device that forwards a packet to the user side, the forwarding device processes the packet according to the pre-configured vlan tag retention option and the translation policy, including: While the vlan tag originally carried by the user in the packet is kept, the P-vlan in the packet is stripped according to the translation policy.

According to another aspect of the present invention, a packet processing apparatus is provided. The apparatus is applied to a forwarding device, and includes: a receiving module configured to receive a Layer 3 forwarded packet; and a processing module configured to be at least according to a pre- The configured virtual local area network tag vlan tag keeps the option to process the message, where the hold option is used to indicate that the vlan tag originally carried by the user in the message is maintained.

Optionally, the processing module includes: a processing unit, configured to process the packet according to the holding option and a translation policy, where the translation policy is used to indicate that the public network side in the packet is The P-vlan tag is processed.

Optionally, in a case that the forwarding device is a device that forwards a packet from the user side to the network side, the processing unit includes: while maintaining a vlan tag originally carried by the user in the packet, Adding the P-vlan to the message according to the translation policy.

Optionally, in a case that the forwarding device is a device that forwards a packet internally, the processing unit includes: while maintaining a vlan tag originally carried by the user in the packet, according to the The translation policy performs a replacement process on the P-vlan in the message.

Optionally, in a case that the forwarding device is a device that forwards a packet to the user side, the processing unit includes: while maintaining the vlan tag originally carried by the user in the packet, according to The translation strategy strips the said The P-vlan in the message.

According to the present invention, the forwarding device receives the packet of the Layer 3 forwarding; the forwarding device processes the packet according to at least the pre-configured virtual local area network label vlan tag holding option, wherein the holding option is used to indicate the pair The vlan tag originally carried by the user in the packet is maintained, which solves the problem that the vlan tag originally carried by the user is lost when the packet is forwarded in the layer 3, and the packet is implemented. The effect of the integrity of the vlag tag message originally carried by the user is ensured on the basis of the Layer 3 forwarding.

DRAWINGS

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a flowchart of a message processing method according to an embodiment of the present invention;

2 is a block diagram showing the structure of a message processing apparatus according to an embodiment of the present invention;

FIG. 3 is a structural block diagram of a processing module 24 in a message processing apparatus according to an embodiment of the present invention; FIG.

4 is a schematic diagram of Layer 3 forwarding of a QINQ packet in a network according to an embodiment of the present invention;

FIG. 5 is a flow chart showing the steps of performing three-layer forwarding of a QINQ message in a forwarding device according to an embodiment of the present invention.

detailed description

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

A packet processing method is provided in the embodiment of the present invention. FIG. 1 is a flowchart of a packet processing method according to an embodiment of the present invention. As shown in FIG. 1, the process includes the following steps:

Step S102: The forwarding device receives the packet that is forwarded by the third layer.

In step S104, the forwarding device processes the packet according to the pre-configured virtual local area network label vlan tag holding option, where the holding option is used to indicate that the vlan tag originally carried by the user in the packet is maintained.

The above-mentioned steps are used to maintain the vlan tag originally carried by the user in the packet according to the pre-configured vlan tag hold option, so that the user does not appear when the packet is forwarded in the third layer. The problem of the original vlan tag being lost is solved, which solves the problem that the vlan tag originally carried by the user is lost when the packet is forwarded in the layer 3, and the three-layer forwarding of the packet is achieved. The effect of the integrity of the vlag tag message originally carried by the user is guaranteed.

The method in the foregoing embodiment is applicable to a chip that supports the inner layer or the outer layer vlan tag while supporting the three-layer forwarding message. In the chip, the inner vlan tag can be directly maintained (ie, the user The original vlan tag can be used to control the outer vlan tag (ie, the public network side P-vlan tag) by maintaining the inner vlan tag and directly passing the routing table behavior of the Layer 3 forwarding. Add, replace, and strip. At the same time, there is another case. Since the above hold option may have the function of maintaining the vlan tag originally carried by the user, the hold option may also maintain the vlan tag of the inner and outer layers of the message when the layer 3 is forwarded. At the exit of the forwarding device, the auxiliary vlan translation function (ie, the translation policy) is also required to process the outer vlan tag, so that the C-vlan of the user side (that is, the vlan tag originally carried by the user) can be maintained. , can complete the normal three-layer forwarding of P-vlan. In an optional embodiment, the forwarding device processes the packet according to the pre-configured virtual local area network label vlan tag hold option, and the forwarding device processes the message according to the foregoing hold option and the translation policy, where The translation policy is used to instruct the processing of the public network side P-vlan tag in the above message. The P-vlan can be different in different forwarding devices. The foregoing forwarding device may include three types, the first type is a device that forwards packets to the network side, the second type is a device that forwards packets internally, and the third type is that the network side forwards the packet to the user side. device.

In an optional embodiment, the translation policy may be set on the forwarding device according to the location of the forwarding device in the network, that is, the translation policy is different for different types of forwarding devices.

The following describes the packet processing in combination with the specific location of the forwarding device in the network:

In an optional embodiment, when the forwarding device is a device that forwards a packet from the user side to the network side, the forwarding device processes the packet according to the pre-configured vlan tag retention option and the translation policy, including: The vlan tag originally carried by the user in the above packet is maintained, and the P-vlan is added to the packet according to the translation policy. In this embodiment, the packet is forwarded from the user side to the forwarding device, and the forwarding device is provided with a vlan tag holding function of the Layer 3 forwarding. In addition, for the range of the C-vlan of a certain user side, the configuration corresponds to the C- The vlan translation table of the vlan range adds a vlan tag of the corresponding egress three-layer interface to the vlan of the C-vlan range, that is, the C-vlan of the user side is maintained, and the C-vlan is maintained at the same time. Add a layer of P-vlan to the message on the exit.

In an optional embodiment, when the forwarding device is a device that forwards a packet internally, the forwarding device processes the packet according to the pre-configured vlan tag reservation option and the translation policy, including: in the packet The original vlan tag carried by the user is maintained, and the P-vlan carried in the packet is replaced according to the translation policy. That is, when the forwarding device forwards the packet internally on the network side, the forwarding device does not care about the C-vlan of the user side. Therefore, it is not necessary to configure any information related to the C-vlan in the forwarding device. After the route forwarding vlan tag hold function is configured on the forwarding device, you only need to write the Layer 3 interface export information corresponding to a port to the vlan translation table based on the forwarding route on the forwarding device, as long as it hits the Layer 3 route forwarding. The packet sent from this port will be replaced by the vlan translation as the vlan of the egress three-layer interface. This completes the C-vlan of the user and completes the Layer 3 forwarding according to the elan tag of the egress three-layer interface. P-vlan replacement.

In an optional embodiment, when the forwarding device is a device that forwards a packet to the user side, the forwarding device processes the packet according to the pre-configured vlan tag retention option and the translation policy, including: While maintaining the vlan tag originally carried by the user in the packet, the P-vlan in the packet is stripped according to the above translation policy. That is to say, the packet enters the forwarding device from the network, and the forwarding device is provided with a layer 3 forwarding vlan tag holding function, and A vlan translation table corresponding to the C-vlan range is configured on the forwarding device, and the vlan translation table is used to strip the vlan of the C-vlan range from the outer vlan on the forwarding outlet. In this way, after the packet is forwarded through Layer 3, the P-vlan carried in the original packet is stripped off at the egress of the Layer 3 forwarding.

The main purpose of the embodiment of the present invention is to provide a vlan tag that is originally carried by the user, and a normal forwarding of the packet on the public network side. In the process of forwarding, the vlan tag carried by the user is not lost, and the P-vlan on the public network side is also processed based on the normal three-layer forwarding effect.

It can be seen from the foregoing embodiments that the following conditions can be met for the three-layer forwarding of the packet: 1. The vlan tag hold function needs to be set on the forwarding device when forwarding at the third layer. 2. The egress vlan translation table on the forwarding device needs to set the corresponding C-vlan translation policy and P-vlan translation policy according to the location of the forwarding device. With this configuration, when the device's QINQ packet is forwarded in Layer 3, the function of adding P-vlan, replacing P-vlan, and stripping P-vlan is implemented while maintaining C-vlan at different locations. For the above-mentioned chip supporting the three-layer forwarding while maintaining the inner layer or the outer vlan tag, it is not necessary to have the condition 2.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course, by hardware, but in many cases, the former is A better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a cell phone, a computer, a server, or a network device, etc.) to perform the methods of various embodiments of the present invention.

In this embodiment, a message processing device is also provided, which is used to implement the foregoing embodiments and preferred embodiments, and has not been described again. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 2 is a structural block diagram of a message processing apparatus according to an embodiment of the present invention. The message processing apparatus may be applied to a forwarding device, and the location of the forwarding device may be multiple. As shown in Figure 2, the apparatus includes a receiving module 22 and a processing module 24, the apparatus being described below.

The receiving module 22 is configured to receive the three-layer forwarded message; the processing module 24 is connected to the receiving module 22, and is configured to process the packet according to at least the pre-configured virtual local area network tag vlan tag holding option, where The hold option is used to indicate that the vlan tag originally carried by the user in the message is maintained.

FIG. 3 is a structural block diagram of a processing module 24 in a message processing apparatus according to an embodiment of the present invention. As shown in FIG. 3, the processing module 24 includes a processing unit 32, which will be described below.

The processing unit 32 is configured to process the message according to the hold option and the translation policy, where the translation policy is used to instruct processing on the public network side P-vlan tag in the message.

When the message is processed, the message may be processed according to the hold option and the translation policy, where the translation policy may be set on the forwarding device according to the location of the forwarding device in the network.

In an optional embodiment, in the case that the forwarding device is a device that forwards a packet from the user side to the network side, the processing unit 32 includes: maintaining the vlan tag originally carried by the user in the packet. At the same time, P-vlan is added to the above message according to the translation strategy.

In an optional embodiment, in the case that the forwarding device is a device that forwards the packet internally, the processing unit 32 includes: while maintaining the vlan tag originally carried by the user in the packet, The P-vlan in the above message is replaced according to the translation policy.

In an optional embodiment, in the case that the forwarding device is a device that forwards the packet to the user side, the processing unit 32 includes: maintaining the vlan tag originally carried by the user in the packet. At the same time, the P-vlan in the above message is stripped according to the translation strategy.

The above embodiment is exemplified below:

For example, a user packet carries the user-side C-vlan 100 to enter the network, and then passes through devices A, B, and C in the manner of Layer 3 routing forwarding. The device A is a forwarding device that forwards packets from the user side to the network side, and is responsible for completing the action of adding the network side P-vlan 1001. The device B is the internal forwarding device on the network side and is responsible for the normal Layer 3 forwarding. The ingress Layer 3 interface vlan is P-vlan1001, and the vlan of the egress Layer 3 interface is P-vlan 1002. The device C is a forwarding device that forwards packets to the user side, and is responsible for performing the action of stripping the P-vlan 1001.

Embodiment 1

The device A receives the data packet carrying a single-layer vlan tag packet of the original user-side C-vlan 100 (the vlan tag originally carried by the user), and the packet needs to be forwarded in three layers.

On the hit routing table of the data packet on device A, the option to forward the vlan tag is configured. Therefore, device A forwards the packet to the egress of the routing table, and keeps C-vlan 100 unchanged.

In the egress vlan translation table of device A, the vlan translation action of the service vlan 100 is configured to add a vlan, and the vlan to be added matches the vlan of the egress three-layer interface when the layer 3 is forwarded. In this embodiment, You need to add the network-side P-vlan 1001. You can configure one service vlan to correspond to one network-side vlan to be added. You can also configure multiple service vlans to correspond to one network-side vlan to be added.

The data packet received by device A hits the vlan translation table at the exit, and the original layer vlan 100 is changed into two layers vlan, and the outer layer is P-vlan 1001 added by the vlan translation table, and the inner layer is Keep the original user side C-vlan 100.

At this point, the packet is forwarded from the user side to the network layer. After forwarding, the user side vlan 100 is reserved and the outer network side vlan 1001 is added.

Embodiment 2

The device B has received the packets carrying the two VLANs. The inner layer is the original user-side C-vlan 100. It is a layer of network side P-vlan 1001 added by device A.

The device B does not pay attention to the C-vlan on the user side, performs Layer 3 forwarding according to the Layer 3 forwarding information of the packet, and the Layer 3 forwarding route is also set with the vlan tag reservation flag.

Device B forwards the packet to the destination exit of the route. The Layer 3 interface vlan of the egress is 1002.

On Device B, you need to configure the destination VLAN for the egress on the egress vlan translation table to modify the outer VLAN vlan 1001 to be the egress interface.

The message hits the export vlan translation table, and the outer vlan tag is modified according to the vlan 1002 of the egress three-layer interface, that is, the original C-vlan does not change, and is still vlan 100, and the outer P-vlan 1001, after After forwarding, it becomes the Layer 3 interface vlan 1002 of the destination exit of the Layer 3 route forwarding.

At this point, the packet is forwarded at Layer 3 inside the network. After forwarding, the user-side vlan 100 is still reserved. The outer network side vlan is replaced by the vlan 1001 of the ingress Layer 3 interface and the vlan 1002 of the egress Layer 3 interface according to the effect of Layer 3 forwarding.

Embodiment 3

The device C receives the data packet, and the data packet carries the original user-side C-vlan 100 and the outer network side P-vlan 1002 that the device B replaces after completing the Layer 3 forwarding.

On the hit routing table of the data packet on the device C, the option to forward the vlan tag is configured. Therefore, the device C forwards the packet to the egress of the routing table, and keeps the C-vlan 100 and the P-vlan 1002 unchanged.

In the export vlan translation table of device C, the vlan translation action of the service vlan 100 is configured to strip the outer vlan (where a service vlan can be configured, and multiple services vlan can be configured to simultaneously strip the outer vlan).

If the device C packet hits the vlan translation table at the egress, the original outer vlan 1002 is stripped and restored to retain only the original user-side C-vlan message.

At this point, the Layer 3 forwarding of the packet from the network side to the user side is completed. After forwarding, the original user side vlan 100 is reserved, and the outer network side vlan 1002 is stripped.

FIG. 4 is a schematic diagram of Layer 3 forwarding of a QINQ message in a network according to an embodiment of the present invention. As shown in Figure 4, after the vlan tag retention flag of the Layer 3 forwarding is configured, the user-side C-vlan is always maintained during the forwarding process, and the P-vlan is added, replaced, and stripped in order to complete the network side. The action also needs to add, replace and strip the matching entries and actions in the export vlan translation table of the forwarding device, and complete the entire QINQ message in the three-layer network through the cooperative processing of the above steps. Normal forwarding.

FIG. 5 is a flowchart of a step of performing Layer 3 forwarding of a QINQ packet in a forwarding device according to an embodiment of the present invention. As shown in FIG. 5, the process includes the following steps:

According to the location of the forwarding device, the above process is divided into three types:

1. User side - network side equipment

Step S511, completing learning or setting of a routing table related to the QINQ service;

Step S512, setting a vlan tag retention flag of the route forwarding related to the QINQ service;

Step S513, setting a user-side vlan or a user-side vlan corresponding to a vlan translation table of a network side P-vlan to add a layer of vlan;

In step S514, the setting is completed.

2. Network side internal forwarding device

Step S521, completing learning or setting of a routing table related to the QINQ service;

Step S522, setting a vlan tag retention flag of the route forwarding related to the QINQ service;

Step S523, setting a replacement action of the vlan translation table between the vlan tag of the network-side ingress interface and the vlan tag of the egress three-layer interface;

In step S524, the setting is completed.

3. Network side - user side equipment

Step S531, completing learning or setting of a routing table related to the QINQ service;

Step S532, setting a vlan tag retention flag of the route forwarding related to the QINQ service;

Step S533, setting the action of stripping the outer vlan of the vlan translation table corresponding to the user side vlan or some user side vlan;

In step S534, the setting is completed.

It can be seen from the above embodiment that the Vlan tag holding bit of the route forwarding and the processing method of the vlan translation table in the foregoing solution can make the QINQ message forwarding completely in the third layer. The forwarding environment is supported, and the network side forwarding still does not affect the effect of QINQ packet forwarding on the user side vlan. This technology can greatly enhance the network application capability of QINQ technology, that is, in addition to applying QINQ technology in L2 and L2VPN networks. In addition, QINQ technology can also be applied in L3 routing networks.

The forwarding device can achieve the forwarding effect of retaining the user vlan and replacing the outer vlan in the case that the forwarding device does not support the Layer 3 forwarding of the QINQ. With this technology, the forwarding device can not only support Layer 2 forwarding of QINQ packets, but also implement Layer 3 forwarding similar to the effect of Layer 2 forwarding of QINQ. Therefore, the Layer 3 forwarding capability of the QINQ packet is enriched, the packet forwarding application of the QINQ is improved, and the QINQ packet processing capability of the switch or the PTN device is enhanced.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the modules are located in multiple At In the processor.

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

S1: The forwarding device receives the packet that is forwarded by the third layer.

S2: The forwarding device processes the packet according to the pre-configured virtual local area network label vlan tag retention option, where the hold option is used to indicate that the vlan tag originally carried by the user in the packet is maintained.

Optionally, in the embodiment, the foregoing storage medium may include, but is not limited to, a USB flash drive, a Read-Only Memory (ROM), and a Random Access Memory (RAM). A variety of media that can store program code, such as a hard disk, a disk, or an optical disk.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

It will be apparent to those skilled in the art that the various modules or steps of the present invention described above can be implemented by a general-purpose computing device that can be centralized on a single computing device or distributed across a network of multiple computing devices. Alternatively, they may be implemented by program code executable by the computing device such that they may be stored in the storage device by the computing device and, in some cases, may be different from the order herein. The steps shown or described are performed, or they are separately fabricated into individual integrated circuit modules, or a plurality of modules or steps thereof are fabricated as a single integrated circuit module. Thus, the invention is not limited to any specific combination of hardware and software.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Industrial applicability

As described above, the packet processing method and apparatus provided by the embodiments of the present invention have the following beneficial effects: the following causes the loss of the vlan tag originally carried by the user when performing the Layer 3 forwarding of the packet in the related art. The problem is that the integrity of the vlag tag message originally carried by the user is ensured on the basis of implementing the Layer 3 forwarding of the packet.

Claims

A packet processing method includes:

The forwarding device receives the Layer 3 forwarded packet.

The forwarding device processes the packet according to the pre-configured virtual local area network tag vlan tag hold option, where the hold option is used to indicate that the vlan tag originally carried by the user in the message is maintained.
The method of claim 1, wherein the forwarding device processes the message according to at least a pre-configured virtual local area network tag vlan tag hold option, including:

The forwarding device processes the packet according to the hold option and the translation policy, where the translation policy is used to indicate that the public network side P-vlan tag in the packet is processed.
The method of claim 2, wherein the translation policy is set on the forwarding device according to a location of the forwarding device in the network.
The method according to claim 2, wherein, in the case that the forwarding device is a device that forwards a message from a user side to a network side, the forwarding device pairs the pre-configured vlan tag reservation option and translation policy. The message processing includes:

And adding the P-vlan to the message according to the translation policy while maintaining the vlan tag originally carried by the user in the message.
The method according to claim 2, wherein, in the case that the forwarding device is a device that internally forwards a message on the network side, the forwarding device performs the message according to a pre-configured vlan tag reservation option and a translation policy. Processing includes:

And performing the replacement process on the P-vlan in the packet according to the translation policy, while maintaining the vlan tag originally carried by the user in the packet.
The method according to claim 2, wherein, in the case that the forwarding device is a device that forwards a message to the user side on the network side, the forwarding device pairs the report according to a pre-configured vlan tag reservation option and a translation policy. The text processing includes:

While maintaining the vlan tag originally carried by the user in the packet, the P-vlan in the packet is stripped according to the translation policy.
A packet processing device is applied to a forwarding device, including:

The receiving module is configured to receive the three-layer forwarded packet;

The processing module is configured to process the packet according to at least a pre-configured virtual local area network tag vlan tag hold option, where the hold option is used to indicate that the vlan tag originally carried by the user in the message is maintained.
The apparatus of claim 7 wherein said processing module comprises:

The processing unit is configured to process the message according to the hold option and the translation policy, where the translation policy is used to indicate that the public network side P-vlan tag in the message is processed.
The apparatus of claim 8, wherein the translation policy is set on the forwarding device according to a location of the forwarding device in the network.
The device according to claim 8, wherein, in the case that the forwarding device is a device that forwards a message from the user side to the network side, the processing unit includes:

And adding the P-vlan to the message according to the translation policy while maintaining the vlan tag originally carried by the user in the message.
The device according to claim 8, wherein, in the case that the forwarding device is a device that internally forwards a message on the network side, the processing unit includes:

And performing the replacement process on the P-vlan in the packet according to the translation policy, while maintaining the vlan tag originally carried by the user in the packet.
The device according to claim 8, wherein, in the case that the forwarding device is a device that forwards a message to the user side on the network side, the processing unit includes:

While maintaining the vlan tag originally carried by the user in the packet, the P-vlan in the packet is stripped according to the translation policy.