WO2017219910A1

WO2017219910A1 - Translation method and apparatus for virtual local area network (vlan)

Info

Publication number: WO2017219910A1
Application number: PCT/CN2017/088463
Authority: WO
Inventors: 潘庭山
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-06-21
Filing date: 2017-06-15
Publication date: 2017-12-28
Also published as: CN107528780A

Abstract

Provided are a translation method and apparatus for a virtual local area network (vlan). The method comprises: a switch obtains learning content; determine, according to the learning content, that a same MAC address is learnt into multiple user vlans, and determines a same network side vlan corresponding to the multiple user vlans; and redirect to a traffic forwarding port according to the network side vlan, a source MAC and a destination MAC.

Description

Method and device for translating virtual local area network vlan

Technical field

The embodiments of the present invention relate to, but are not limited to, the field of communications, and in particular, to a method and an apparatus for translating a virtual local area network vlan.

Background technique

At present, Virtual Local Area Network (VLAN) technology has been widely used, and there are only 4k vlans in each network, which leads to the technical concept of vlan translation, which is favored by operators, vlan translation can The user-side vlan is divided into a network-side vlan ID (identification) to enter the carrier network.

Based on the above technology, there is a need to convert multiple vlans on the user side into one vlan on the network side, which is a vlan N:1 translation problem. At present, many manufacturers' devices have already supported the N:1vlan translation problem.

Summary of the invention

The following is a summary of the subject matter described in detail herein, and is not intended to limit the scope of the claims.

The embodiment of the invention provides a method and a device for translating a virtual local area network vlan, and enhances the vlan translation function.

The embodiment of the invention adopts the following technical solutions:

A method for translating a virtual local area network vlan includes:

The switch obtains the learning content;

Determining, by the learning content, that the same MAC address is learned in the plurality of users vlan, and determining that the plurality of users vlan correspond to the same network side vlan;

Redirecting to the network side vlan, source MAC, and destination MAC for traffic forwarding port.

The step of determining the same network side vlan corresponding to the multiple users vlan includes:

The switch sets the virtual interface translated by vlan in the same virtual private LAN service vpls instance;

In the vpls instance, the virtual interface attribute of all user side ports is set to the network network attribute.

Before the step of setting the virtual interface of the vlan translation in the same virtual private local area network service vpls instance, the method further includes:

When transmitting the uplink data, the switch sets the virtual interface forwarded by vpls according to the physical port and the user vlan.

When transmitting downlink data, the virtual interface forwarded by vpls is set according to the physical port and the network side vlan.

The vlan translation method further includes:

When the downlink data is transmitted, the switch is redirected to the port for the traffic forwarding according to the network side vlan, the source MAC address, and the destination MAC address, where the source MAC address and the destination MAC address are obtained from the learning content.

A translation device of a virtual local area network vlan, which is applied to a switch, comprising: an obtaining module, a determining module and a redirection module, wherein

The obtaining module is configured to: acquire learning content;

The determining module is configured to: determine that the same MAC address exists in the plurality of users vlan according to the learning content, and determine the same network side vlan corresponding to the multiple users vlan;

The redirection module is configured to: redirect to a port for traffic forwarding according to the network side vlan, source MAC, and destination MAC.

The determining module is further configured to: set the virtual interface of the vlan translation in the same virtual Private LAN service vpls instance;

The determining module is further configured to: before the switch sets the virtual interface translated by the vlan in the same virtual private local area network service vpls instance, when the uplink data is transmitted, the vpls are forwarded according to the physical port and the user vlan. interface.

The determining module is further configured to: before the switch sets the virtual interface translated by the vlan in the same virtual private local area network service vpls instance, when the downlink data is transmitted, the vpls is forwarded according to the physical port and the network side vlan. Virtual interface.

The redirection module is further configured to: when the downlink data is transmitted, redirect to the port for traffic forwarding according to the network side vlan, the source MAC address, and the destination MAC, where the source MAC and the destination MAC address Both are obtained from the learning content.

According to the foregoing technical solution, the switch obtains the learning content, and determines that the same MAC address is used to learn multiple vlans according to the learning content, which may cause confusion when the data is sent, and the switch obtains the network side vlan obtained from the learning content, The source MAC address and the destination MAC address are redirected to the port to accurately deliver downlink data. The vlan translation function has been greatly enhanced.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

The drawings described herein are intended to provide a further understanding of the invention, and are intended to be a part of the invention. In the drawing:

1 is a flow chart of a method for translating a vlan according to an embodiment of the present invention;

2 is a schematic diagram of a vlan translation application according to an embodiment of the present invention;

FIG. 3 is a schematic flowchart of data forwarding when vlan translates;

4 is a schematic flow chart of data forwarding during vlan translation according to an optional embodiment of the present invention;

FIG. 5 is a schematic flowchart of updating an ACL rule according to an optional embodiment of the present invention; FIG.

FIG. 6 is a structural block diagram of an apparatus of a virtual local area network vlan according to an embodiment of the present invention.

Detailed

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The invention will be described in detail below with reference to the drawings in conjunction with the embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

Although many manufacturers' devices already support the N:1vlan translation problem, they all have the following two implementation flaws.

The first problem is that there is no problem in unicast N:1vlan translation uplink and downlink, but for unknown unicast, unknown multicast, broadcast, etc. cannot be translated. If an unknown unicast or the like is translated, there is a problem that unnecessary traffic is flooded and forwarded between the user side ports.

Question 2: For the same media access control layer (MAC) address, in multiple users vlan, it needs to be translated into a network side vlan. This kind of demand downlink forwarding cannot be realized, and domestic operators are not only A similar implementation requirement for device vendors was made, but several mainstream device vendors could not support it.

Example 1

The method described in this application file can be run on a network device such as a switch. It should be noted that it is not limited to devices such as switches.

In this embodiment, a method for translating a virtual local area network vlan running on a switch is provided. FIG. 1 is a flowchart of a method for translating a vlan according to an embodiment of the present invention. As shown in FIG. 1, the process includes the following steps. :

Step S102, the switch acquires the learning content.

Step S104, determining, according to the learning content, that the same MAC address is learned/present in multiple users vlan, and determining the same network side vlan corresponding to the multiple users vlan;

Step S106, redirecting to the port for traffic forwarding according to the network side vlan, the source MAC address, and the destination MAC address.

Through the above steps, the switch obtains the learning content, and according to the learning content, it is determined that the same MAC address exists in/learns multiple users vlan, and multiple vlans are translated into one network side vlan, and the switch is based on the network side vlan, the destination MAC, and the source. The MAC determines to redirect to a specific port, and implements accurate delivery when performing downlink data forwarding, which greatly enhances the vlan translation function.

Optionally, the same network side vlan corresponding to the multiple users vlan is determined by:

The switch sets the virtual interface of the vlan translation to the same virtual private LAN service vpls instance. In the vpls instance, the virtual interface attribute of all user-side ports is set to the network network attribute. The network attribute port cannot be flooded. The vlan translation method described in this embodiment is used to accurately determine the network side vlan corresponding to multiple users vlan, and the user side port is resolved when the user side vlan is translated into the network side vlan. The problem that the flooding message cannot be suppressed is saved, and unnecessary network forwarding is saved.

Optionally, before the switch sets the virtual interface related to the vlan translation in the same virtual private local area network service vpls instance, the switch sets the virtual interface forwarded by the vpls according to the physical port and the user vlan before transmitting the uplink data.

Optionally, before the switch sets the virtual interface for the vlan translation in the same virtual private local area network service vpls instance, the switch sets the virtual interface forwarded by the vpls according to the physical port and the network side vlan when transmitting the downlink data.

Optionally, the switch redirects to the port for traffic forwarding according to the network side vlan, the source MAC address, and the destination MAC address, where the source MAC address and the destination MAC address are obtained from the learning content.

In an optional embodiment of the present invention, the following technical solution is adopted, and the VLAN translation process is implemented by using a virtual private LAN service (vpls) model, and the vlan translation network side port is configured as a non-network attribute, and the user side is configured. The port is configured as the network attribute. The network attribute port cannot be flooded, and other ports can be flooded. This solves the problem that the vlan translation does not need to flood the user-side port for unicast, unknown multicast, and broadcast packets. Unnecessary network traffic forwarding. After the vlan translation of the vpls model, the necessary 2, 3 layer forwarding is performed.

At present, there is still a problem. For the same MAC address, in multiple users vlan, it needs to be translated into the same network vlan. The downstream forwarding cannot be realized, that is, the same mac, learning multiple users vlan, at the same time The situation that needs to be translated into the network side vlan cannot be implemented. To this end, special processing needs to be added to the switching device. For example, in the Access Control Lists (ACL), a correction processing link for this problem is added. Match the destination mac (the destination MAC is the user mac), the network test vlan, and the source mac (the network side device mac) to set the ACL rule, index to the outbound port and the final translated user vlan.

This application file solves the above two technical problems and is described in detail below.

For the first problem mentioned above, the following technical solutions are adopted:

Step 1: When configuring vlan translation, when transmitting uplink data, set the virtual interface forwarded by vpls according to the physical port + user vlan. When transmitting downlink data, the virtual interface is forwarded according to the physical port + network side vlan setting vpls.

Step 2: Set the relevant virtual interface in the same vpls instance.

The relevant virtual interface here refers to the uplink and downlink virtual interface described in step 1.

Step 3: Set the virtual interface attribute of all user-side ports to the network attribute, and the user-side ports do not need to flood each other.

For the second question above:

The second problem involves detecting whether the same source mac address exists in multiple user vlans and needs to be translated to the same network side vlan. In this case, you need to add the acl rule to handle the downstream vlan translation problem.

Step 1: The switch chip mac learns or aging generates a message to notify the switch Central Processing Unit (CPU).

Step 2: The switch CPU enables the vlan translation according to the user vlan, and the user mac reports in multiple vlans, and records the destination mac address, the source mac, and the vlan correspondence. The vlan correspondence refers to the user side vlan and the network side vlan. Correspondence).

In step three, the CPU updates the ACL rule. The forwarding behavior is determined by the destination mac, the source mac, and the translated network side vlan of the user vlan, and is used for forwarding when the subsequent vlan translates the downlink forwarding.

The above-mentioned method steps can solve the two problems that are common to the current vlan translation technology. The first one is that when the user-side vlan is translated into a network-side vlan, the user-side ports cannot suppress the flooded packets. The problem is the one mentioned above; the second problem is that for the same MAC address, in multiple users vlan, it needs to be translated into a core network vlan. This vlan translation requirement cannot be forwarded correctly, that is, The above question two. The vlan translation function in the related art is greatly enhanced by implementing the method steps of the present application.

The following is a specific embodiment in accordance with an alternative embodiment of the present invention.

2 is a schematic diagram of a vlan translation application according to an embodiment of the present invention. As shown in FIG. 2, a vlan translation method is implemented on a switch chip, and ports Port 1, vlan 1, and source mac 1 need to be translated to vlan 100, and the port is 2, vlan 2 source mac 1 uplink needs to be translated to vlan 100 to go out from port 3.

FIG. 3 is a schematic diagram of the flow of data forwarding during vlan translation, as shown in FIG. 3, showing the vlan translation data forwarding process.

FIG. 4 is a schematic flowchart of data forwarding during vlan translation according to an alternative embodiment of the present invention. As shown in FIG. 4, a flow chart of performing data forwarding according to the vlan translation method of the present application is shown.

The specific implementation of the first technical problem for the above two technical problems is as follows:

Step 1: Port 1+vlan 1 is set to virtual port 1, Port 2+vlan 2 is set to virtual port 2, and port 3+vlan 100 is set to virtual port 3.

Step 2: Set the relevant

virtual ports

1, 2, and 3 to belong to vpls instance 1, and forward them in vpls instance 1.

Step 3: Set the attributes of

virtual ports

1 and 2 to the network attribute, and virtual port 3 to the non-network attribute, so that

virtual ports

1 and 2 are not flooded, and other normal flooding is not affected.

For the second technical problem of the above two technical problems, the specific implementation manner is as follows:

This part needs to detect whether there is a same source mac address, which exists in multiple user vlans, and needs to be translated to the same network side vlan scenario. In this case, you need to add the acl rule to handle the downstream vlan translation problem.

Step one, the exchange chip mac learns to notify the switch CPU, the source mac 1, vlan 1 learned Port 1, source mac 1, vlan 2 learns to port 2. At the same time, it can be known that the destination mac of port 1 is 101, and the destination mac of port 2 is 202.

Step 2: The switch CPU learns

different vlans

1 and 2 according to the same source mac. At the same time,

vlan

1 and 2 enable the vlan translation function, and the translated vlan is 100.

In step three, the CPU updates the ACL rule. Rule 1 matches vlan100+source mac101+ The destination mac1 is redirected to virtual port 1, the packet is sent to port 1, and vlan is changed to 1. Rule 2 matches vlan100+source mac202+ The destination mac 1 is redirected to virtual port 2, the message is sent to port 2, and vlan is changed to 2. FIG. 5 is a schematic flowchart of updating an ACL rule according to an alternative embodiment of the present invention. As shown in FIG. 5, a detailed process of updating an ACL rule is shown.

After the ACL rule is completed, the packet forwarding process is as follows.

When transmitting upstream data,

Port 1, vlan 1 is mapped to virtual port 1, and then vpls mac is learned. The switch searches for it and finds that virtual port 3 is forwarded. Virtual port 3 corresponds to port 3 and vlan 100.

Port 2, vlan 2 is mapped to virtual port 2, and then vpls mac is learned. The switch performs corresponding search and finds that virtual port 3 is forwarded out. Virtual port 3 corresponds to port 3 and vlan 100.

If the destination mac is not found on the upstream, the

virtual ports

1 and 2 are flooded and will not be forwarded, or will go to virtual port 3. You can see flooding isolation to avoid unnecessary traffic forwarding.

When transmitting downlink data,

Vlan100+port3 maps to virtual port 3, and then learns vpls mac. The switch system performs corresponding search. At this time, the search can only go to a fixed

virtual port

1 or 2, because the destination mac address, vlan, are exactly the same. The ACL rule matches the source MAC address of the data packet to determine the destination virtual port of the packet. If the match criterion is 1, that is, the source mac is 101, then go to virtual port 1, and the packet is sent to port 1. The vlan is changed to 1. If the rule 2 is matched, the packet is sent to virtual port 2, and the packet is sent to Port 2, vlan is changed to 2. Thus, the same mac address is implemented, coexisting in multiple users vlan, and when translated to a network side vlan, when forwarding downlink data, accurate forwarding can be performed.

Through the description of the above embodiments, those skilled in the art can clearly understand that the method according to the above embodiment can be implemented by means of software plus a necessary general hardware platform, and of course It can be done through hardware, but in many cases the former is a better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM, disk, The optical disc includes a number of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the method of various embodiments of the present invention.

Example 2

In this embodiment, a device for a virtual local area network (WLAN) is also provided, which is applied to a switch. The device is used to implement the foregoing embodiments and preferred embodiments, and details are not described herein. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 6 is a structural block diagram of an apparatus for a virtual local area network vlan according to an embodiment of the present invention. As shown in FIG. 6, the apparatus includes:

The obtaining module 62 is configured to: acquire learning content;

The determining module 64 is connected to the obtaining module 62, and is configured to: determine, according to the learning content, that the same MAC address is learned/present in the plurality of users vlan, and determine the same network side vlan corresponding to the plurality of users vlan;

The redirection module 66 is connected to the determining module 64 and configured to: redirect to the port for traffic forwarding according to the network side vlan, the source MAC, and the destination MAC.

Optionally, the determining module 64 is further configured to: set the virtual interface related to the vlan translation in the same virtual private local area network service vpls instance;

It is also set to: in the vpls instance, set the virtual interface attribute of all user side ports to the network network attribute.

Optionally, the determining module 64 is further configured to: before the switch sets the virtual interface related to the vlan translation in the same virtual private local area network service vpls instance, when the uplink data is transmitted, the vpls is forwarded according to the physical port and the user vlan. Virtual interface.

Optionally, the determining module 64 is further configured to: before the switch sets the virtual interface related to the vlan translation in the same virtual private local area network service vpls instance, when transmitting the downlink data, According to the physical port and the network side vlan, the virtual interface forwarded by vpls is set.

Optionally, the redirection module 66 is further configured to: when the downlink data is transmitted, redirect to the port used for traffic forwarding according to the network side vlan, the source MAC address, and the destination MAC, where the source MAC address and the destination MAC address are both Get it from the learning content.

It should be noted that each of the above modules may be implemented by software or hardware. For the latter, the foregoing may be implemented by, but not limited to, the foregoing modules are all located in the same processor; or, the above modules are in any combination. The forms are located in different processors.

Example 3

Embodiments of the present invention also provide a storage medium. Optionally, in the embodiment, the foregoing storage medium may be configured to store program code for performing the following steps:

S1, the switch acquires learning content;

S2, determining, according to the learning content, that the same MAC address is learned in the plurality of user vlans, and determining that the plurality of users vlan correspond to the same network side vlan;

S3, redirecting to the port for traffic forwarding according to the network side vlan, the source MAC address, and the destination MAC address.

Optionally, in this embodiment, the foregoing storage medium may include, but not limited to, a USB flash drive, a Read-Only Memory (ROM), a Random Access Memory (RAM), a mobile hard disk, and a magnetic memory. A variety of media that can store program code, such as a disc or a disc.

Optionally, in this embodiment, the processor executes the method steps described in the foregoing embodiments according to the stored program code in the storage medium.

For example, the specific examples in this embodiment may refer to the examples described in the foregoing embodiments and the optional embodiments, and details are not described herein again.

The embodiment of the invention also discloses a computer program, comprising program instructions, which when executed by a computer, enable the computer to execute any of the above-mentioned vlan translation methods.

The embodiment of the invention also discloses a carrier carrying the computer program.

Those skilled in the art should understand that the technical solutions of the present invention may be modified or The equivalents of the present invention are intended to be included in the scope of the appended claims.

Those of ordinary skill in the art will appreciate that all or some of the steps, systems, and functional blocks/units of the methods disclosed above may be implemented as software, firmware, hardware, and suitable combinations thereof. In a hardware implementation, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may be composed of several physical The components work together. Some or all of the components may be implemented as software executed by a processor, such as a digital signal processor or microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit. Such software may be distributed on a computer readable medium, which may include computer storage media (or non-transitory media) and communication media (or transitory media). As is well known to those of ordinary skill in the art, the term computer storage medium includes volatile and nonvolatile, implemented in any method or technology for storing information, such as computer readable instructions, data structures, program modules or other data. Sex, removable and non-removable media. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical disc storage, magnetic cartridge, magnetic tape, magnetic disk storage or other magnetic storage device, or may Any other medium used to store the desired information and that can be accessed by the computer. Moreover, it is well known to those skilled in the art that communication media typically includes computer readable instructions, data structures, program modules, or other data in a modulated data signal, such as a carrier wave or other transport mechanism, and can include any information delivery media. .

Industrial applicability

According to the foregoing technical solution, the switch obtains the learning content, and determines that the same MAC address is used to learn multiple vlans according to the learning content, which may cause confusion when the data is sent, and the switch obtains the network side vlan obtained from the learning content, The source MAC address and the destination MAC address are redirected to the port to accurately deliver downlink data. The vlan translation function has been greatly enhanced. Therefore, the application has strong industrial applicability.

Claims

A method for translating a virtual local area network vlan includes:

The switch obtains the learning content;

Determining, by the learning content, that the same MAC address is learned in the plurality of users vlan, and determining that the plurality of users vlan correspond to the same network side vlan;

Redirecting to the port for traffic forwarding according to the network side vlan, source MAC, and destination MAC.
The method for translating a vlan according to claim 1, wherein the step of determining the same network side vlan corresponding to the plurality of users vlan comprises:

The switch sets the virtual interface translated by vlan in the same virtual private LAN service vpls instance;

In the vpls instance, the virtual interface attribute of all user side ports is set to the network network attribute.
The method for translating a vlan according to claim 2, wherein before the step of setting the virtual interface of the vlan translation in the same virtual private local area network service vpls instance, the method further comprises:

When transmitting the uplink data, the switch sets the virtual interface forwarded by vpls according to the physical port and the user vlan.
The method for translating a vlan according to claim 2, wherein before the step of setting the virtual interface of the vlan translation in the same virtual private local area network service vpls instance, the method further comprises:

When transmitting downlink data, the virtual interface forwarded by vpls is set according to the physical port and the network side vlan.
The method for translating vlan according to claim 1, further comprising:

When the downlink data is transmitted, the switch is redirected to the port for the traffic forwarding according to the network side vlan, the source MAC address, and the destination MAC address, where the source MAC address and the destination MAC address are obtained from the learning content.
A translation device of a virtual local area network vlan, which is applied to a switch, comprising: an obtaining module, a determining module and a redirection module, wherein

The obtaining module is configured to: acquire learning content;

The determining module is configured to: determine that the same MAC address exists in the plurality of users vlan according to the learning content, and determine the same network side vlan corresponding to the multiple users vlan;

The redirection module is configured to: redirect to a port for traffic forwarding according to the network side vlan, source MAC, and destination MAC.
The translation device of the vlan according to claim 6, wherein the determining module is further configured to: set a virtual interface of the vlan translation in the same virtual private local area network service vpls instance;

In the vpls instance, the virtual interface attribute of all user side ports is set to the network network attribute.
The translation device of the vlan according to claim 7, wherein the determining module is further configured to: when the switch sets the virtual interface of the vlan translation in the same virtual private local area network service vpls instance, when transmitting the uplink data, The physical port and the user vlan set the virtual interface forwarded by vpls.
The translation device of the vlan according to claim 7, wherein the determining module is further configured to: when the switch sets the virtual interface of the vlan translation in the same virtual private local area network service vpls instance, when transmitting the downlink data, The physical port and the network side vlan set the virtual interface forwarded by vpls.
The translation device of the vlan according to claim 6, wherein the redirection module is further configured to: when the downlink data transmission is performed, redirect to the port for traffic forwarding according to the network side vlan, the source MAC address, and the destination MAC address. The source MAC and the destination MAC are both obtained from the learning content.