WO2021017619A1

WO2021017619A1 - Dmvpn control method, network device, communication system and storage medium

Info

Publication number: WO2021017619A1
Application number: PCT/CN2020/093800
Authority: WO
Inventors: 马飞
Original assignee: 中兴通讯股份有限公司
Priority date: 2019-07-29
Filing date: 2020-06-01
Publication date: 2021-02-04
Also published as: CN112311569A

Abstract

Provided are a DMVPN control method, a network device, a communication system and a storage medium. The method comprises: when a main central node fails, a standby central node providing a service for a branch node and/or a central node in a DMVPN network. In some implementation processes, after the main central node fails, communication can be ensured by means of the standby central node, thereby improving the stability of DMVPN networking communication.

Description

DMVPN control method, network equipment, communication system and storage medium

Technical field

The embodiments of the present disclosure relate to but not limited to the communication field, and specifically, relate to but not limited to a DMVPN control method, a network device, a communication system, and a storage medium.

Background technique

DMVPN (Dynamic Multipoint Virtual Private Network, Dynamic Multipoint Virtual Private Network) is a network that dynamically establishes a VPN Tunnel (Virtual Private Line Tunnel). The DMVPN network includes hub nodes (central nodes) and spoke nodes (branch nodes), using NHRP (Next Hop Resolution Protocol, next hop resolution protocol) technical analysis requires the establishment of VPN (Virtual Private Network, virtual private network) tunnel The peer address, and use the mGRE (multipoint Generic Routing Encapsulation, multipoint general routing encapsulation) tunnel (tunnel) port to establish a multi-point GRE over IPSec (Internet Protocol Security, Internet Security Protocol) VPN tunnel, to achieve the central node and branch nodes and Communication between branch nodes.

In DMVPN networking, communication between nodes usually needs to pass through the central node. If the central node fails, it will cause communication interruption and network paralysis, which reduces the stability of DMVPN networking communication.

Summary of the invention

The DMVPN control method, network equipment, communication system, and storage medium provided by the embodiments of the present disclosure mainly solve the technical problem of low stability of existing DMVPN network communication.

In order to solve the above technical problems, embodiments of the present disclosure provide a DMVPN control method, which includes: when the main central node fails, the standby central node provides services for branch nodes and/or central nodes in the DMVPN network.

The embodiment of the present disclosure further provides a network device, including: a first processor, a first memory, and a first communication bus; the first communication bus is configured to realize connection and communication between the first processor and the first memory; The first processor is configured to execute one or more computer programs stored in the first memory to implement the steps of the central node in the DMVPN control method.

The embodiment of the present disclosure further provides a network device, including: a second processor, a second memory, and a second communication bus; the second communication bus is configured to realize connection and communication between the second processor and the second memory; The second processor is configured to execute one or more computer programs stored in the second memory to implement the step of the branch node in the DMVPN control method

The embodiments of the present disclosure also provide a storage medium, the storage medium stores one or more computer programs, and the one or more computer programs can be executed by one or more processors to implement the DMVPN control method described in Steps of the central node or the branch node.

The beneficial effects of the present disclosure are: according to the DMVPN control method, network equipment, communication system, and storage medium provided by the embodiments of the present disclosure, when the main central node fails, the standby central node is the branch node and/or center in the DMVPN network The nodes provide services. In some implementations, after the main central node fails, the standby central node can ensure communication, thereby improving the stability of DMVPN network communication.

Other features and corresponding beneficial effects of the present disclosure are described in the latter part of the specification, and it should be understood that at least part of the beneficial effects will become obvious from the description in the specification of the present disclosure.

Description of the drawings

Fig. 1 is a flowchart of a DMVPN control method according to the first embodiment of the disclosure;

FIG. 2 is a flowchart of the election of the primary central node and the standby central node in the first embodiment of the disclosure;

FIG. 3 is a detailed flowchart of the DMVPN control method according to the second embodiment of the disclosure.

FIG. 4 is a schematic diagram of a DMVPN architecture according to the second embodiment of the disclosure;

FIG. 5 is a schematic diagram of encapsulation and encryption according to the second embodiment of the disclosure;

FIG. 6 is a schematic diagram of a network device structure according to the fourth embodiment of the disclosure;

Fig. 7 is a schematic structural diagram of another network device according to the fourth embodiment of the disclosure.

Detailed ways

In order to make the objectives, technical solutions, and advantages of the present disclosure clearer, the following further describes the embodiments of the present disclosure in detail through specific implementations in conjunction with the accompanying drawings. It should be understood that the specific embodiments described herein are only used to explain the present disclosure, but not used to limit the present disclosure.

Example one:

In the prior art, after the central node in the DMVPN networking fails, the communication is interrupted and the network is paralyzed, thereby reducing the reliability of the DMVPN networking communication. In order to solve this problem, an embodiment of the present disclosure proposes a DMVPN control method, as shown in FIG. 1, which is a flowchart of the DMVPN control method provided by an embodiment of the present disclosure, including:

S101. When the main central node fails, the standby central node provides services for branch nodes and/or central nodes in the DMVPN network.

In the embodiment of the present disclosure, the DMVPN network includes at least two central nodes. Among them, the node in the working state of the main central node is the main central node, and the node in the working state of the standby central node is the standby central node. It should be noted that, A central node, based on its different working status, can be the main central node or the standby central node. When the main central node is in a normal working state, the main central node is set to provide services for communication in the DMVPN network, that is, to provide services for communication between branch nodes and/or central nodes in the DMVPN network. In order to save resources, At this time, the backup center node may be in an idle state. When the main central node fails, the main central node can no longer provide services for communications in the DMVPN network. Therefore, the standby central node provides services for communications in the DMVPN network, that is, the standby central node serves as the DMVPN network The branch node and/or the central node in the communication provide service to ensure the normal communication of the DMVPN network and improve the reliability of the DMVPN network communication. It should be understood that the provision of services for communications in the DMVPN networking includes but is not limited to providing communication services such as data forwarding. Regardless of whether the main central node or the standby central node, the objects that provide communication services include but are not limited to branch nodes and central nodes Wait.

In the embodiment of the present disclosure, the master central node may periodically send keep-alive messages to the standby central node. If the backup center node does not receive the including message sent by the master center node within the preset time period, it is determined that the master center node is faulty and provides services for communication in the DMVPN network.

In the embodiment of the present disclosure, each central node may determine whether it is a primary central node or a standby central node based on configuration information. Alternatively, each central node may also select the main central node and the standby central node based on preset election rules, where the preset election rules include, but are not limited to, that the address identifier of the primary central node is greater than the address identifier of the standby central node, or the primary center The address identifier of the node is smaller than the address identifier of the standby center node. For example, referring to Figure 2, when the preset election rule is that the address identifier of the primary center node is greater than the address identifier of the backup center node, the election process of the primary center node and the backup center node includes:

S201: The first central node sends an interactive message to the second central node.

In the embodiment of the present disclosure, the first central node and the second central node are central nodes in the DMVPN networking, and are not the same central node.

The first central node is the election initiator, and the first central node can determine itself as the election initiator based on the received election initiation command, and send an interactive message to the second central node to start the election of the primary central node and the standby central node.

It should be noted that the interactive message here and the interactive message mentioned later include information such as the address identifier of the sender. For example, if the first central node sends an interactive message to the second central node, the first central node is the sender. Therefore, the interactive message includes the address identifier of the first central node. The address identifier may be at least one of an IP address (for example, a direct connection port address, etc.), a mac (Media Access Control Address, media access control) address (for example, a device loopback address, etc.). When the device loopback address is included in the interactive message, the first central node and the second central node need to communicate basic routes through IGP (Interior Gateway Protocol) to ensure that the routes are reachable.

S202: The second central node sends an interactive message to the first central node.

After receiving the interactive message sent by the first central node, the second central node sends the interactive message to the first central node. It should be understood that the interactive message sent by the second central node to the first central node also includes the address identifier of the sender. Here, the sender of the interactive message is the second central node and therefore includes the second central node The address identification.

S203. The first central node judges whether the address identifier of the local end is greater than the address identifier of the second central node.

If yes, go to S204; if not, go to S206.

After receiving the interactive message sent by the second central node, the first central node extracts the address identifier of the second central node from the interactive message, and compares it with the address identifier corresponding to the local end to determine the first central node Whether the address identifier of is greater than the address identifier of the second central node, if yes, go to S204; if not, go to S206. For example, assuming that the interactive message includes the address of the direct connection port, the first central node extracts the direct connection port address of the second central node from the interactive message sent by the second central node to the first central node, and adds the direct connection port address of the local end. The connection port address is compared with the direct connection port address of the second central node. When the direct connection port address of the first central node is greater than the direct connection port address of the second central node, go to S204; at the direct connection port address of the first central node When the address is smaller than the direct connection port address of the second central node, go to S206.

S204: The first central node sets its own working state as the working state of the main central node, and sends a confirmation message to the second central node.

When the address identifier of the first central node is greater than the address identifier of the second central node, the first central node sets its own working status to the working status of the primary central node, that is, at this time, the first central node is the primary central node . In addition, the first central node sends a confirmation message to the second central node. Wherein, the confirmation message may include at least one of the sender's group ID number, address identification, etc., where the address identification includes but is not limited to at least one of an IP address and a mac address (device address). That is to say, the confirmation message sent by the first central node to the second central node includes at least one of the group ID number and address identification of the first central node.

S205: The second central node sets its own working state to the working state of the standby central node.

After receiving the confirmation message sent by the first central node, the second central node sets its own working status as the standby central node working status, that is, at this time, the second central node is the standby central node.

S206: The first central node sends an interactive message to the second central node.

When the address identifier of the first central node is smaller than the address identifier of the first central node, the first central node sends an interactive message to the second central node. It should be understood that the sender of the interactive message here is the first center The node, therefore, includes the address identification of the first central node.

S207: The second central node sets the working status of the main central node, and sends a confirmation message to the first central node.

After receiving the interactive message, the second central node can directly set its own working state as the working state of the main central node, and send a confirmation message to the first central node. Alternatively, the second central node may also obtain the address identification of the first central node from the interaction message sent by the first central node, and compare it with its own address identification. The address identification of the second central node is greater than that of the first central node. When the address of the central node is identified, the working state of the second central node is set as the working state of the main central node, and a confirmation message is sent to the first central node. It should be noted that the sender of the confirmation message here is the second central node. Therefore, it may include at least one of the group ID number and address identification of the second central node, wherein the address identification includes but not It is limited to at least one of IP address, mac address (device address), etc.

S208: The first central node sets the working state to the working state of the standby central node.

After receiving the confirmation message sent by the second central node, the first central node sets its working state as the standby central node, that is, at this time, the first central node is the standby central node.

In the embodiment of the present disclosure, the first central node and the second central node belong to the same networking. Therefore, it is necessary to determine whether the first central node and the second central node are in the same networking. Among them, it can be judged whether the first central node and the second central node belong to the same network based on whether the group ID numbers of the first central node and the second central node are the same. Of course, it can also be judged based on other information. Whether the second center reception belongs to the same network. The judgment process can be executed by the first central node or the second central node. For example, the interactive message in the aforementioned election process may include the sender’s group ID number. In S202, the second central node extracts the group ID of the first central node after receiving the interactive message sent by the first central node. ID number, and compare it with its own group ID number. If they are consistent, the interactive message is sent to the first central node. Or, in S203, after receiving the interaction message sent by the second central node, the first central node extracts the group ID number of the second central node from it, and compares it with its own group ID number, if they are consistent , It is determined whether the address identification of the first central node is greater than the address identification of the second central node, that is, the group ID number of the first central node at the local end is consistent with the group ID number of the second central node, and the address identification of the local end is greater than When the address of the second central node is identified, the working status is set as the working status of the primary central node, and a confirmation message is sent to the second central node.

Among them, for the preset election rules when the address identifier of the primary center node is less than the address identifier of the standby center node, etc., the election process can refer to the above preset election rule when the address identifier of the primary center node is greater than the address identifier of the standby center node. The election process will not be repeated here.

In the embodiment of the present disclosure, after the primary central node or the secondary central node is selected, if the identification information of the primary central node or secondary central node changes, the central node whose identification information has changed can be used as the first central node to re-initiate the primary central node. The central node and the central node election process to redefine the main central node and standby central node. The identification information may be at least one of the IP address, group ID number, and mac address of the central node. For example, after the IP address of the primary central node changes, the primary central node can act as the first central node to send interactive messages to the second central node (standby central node) to start the election process of the primary central node and standby central node. Re-determine the main central node and standby central node.

In the embodiments of the present disclosure, after the election of the main center node and the backup center node is completed, each branch node in the DMVPN network sends a registration request to the main center node and the backup center node to complete the registration on the main center node and the backup center node. . After receiving the registration request sent by the branch node, the main central node updates the NHRP mapping table of the main central node based on the registration request; the standby central node updates the NHRP mapping of the standby central node based on the registration request after receiving the registration request sent by the branch node table. Among them, the NHRP mapping table includes the mapping relationship between the tunnel address and the next hop address.

In the embodiment of the present disclosure, the branch node may send a registration request to the main central node and the standby central node based on the configured main and standby routing table and the NHRP main and standby mapping table, respectively. Among them, the active/standby routing table includes the route of the active central node and the route of the standby central node. The main and standby route outlets point to the tunnel interfaces of the active and standby central nodes respectively; the NHRP active/standby mapping table includes the tunnel address of the active central node and the next The mapping relationship of the hop address, the mapping relationship between the tunnel address of the backup center node and the next hop address. Among them, the active and standby routing tables can be implemented based on a static routing protocol (that is, active and standby static routing tables), or can be implemented based on a dynamic routing protocol (that is, active and standby dynamic routing tables). The NHRP master-slave mapping table can be dynamic (that is, the NHRP dynamic master-slave mapping table) or static (that is, the NHRP static master-slave mapping table).

After the main central node fails, the branch node communicates with the outside through the standby central node based on the configured main-standby routing table and the NHRP main-standby mapping table. That is, the branch node finds the route of the backup center node based on the main backup routing table, and finds the next hop address corresponding to the center node based on the NHRP master backup mapping table, encapsulates and encrypts the data and sends it to the backup center node.

In the embodiments of the present disclosure, the active/standby routing table and/or the NHRP active/standby mapping table may include switchback configuration information, where the switchback configuration information may include switchback configuration information and/or switchback waiting time. After the main central node is restored, the branch node can determine whether to switch back to the main central node based on the switch back configuration information, that is, determine whether to switch back to communicating with the outside world through the main central node from the current standby central node communicating with the outside world . If the active/standby routing table or the NHRP active/standby mapping table includes the switchback configuration information, and the switchback configuration information is switchback, after the main central node is restored, the branch node switches back to communicate with the outside world through the main central node; If the switchback configuration information is no switchback, after the main central node is restored, the branch node continues to communicate with the outside world through the standby central node. If both the active/standby routing table and the NHRP active/standby mapping table include whether to switch back configuration information, when the switchback configuration information in the active/standby routing table and the NHRP active/standby mapping table are both switchback, then the main center node will be restored Later, the branch node switches back to communicating with the outside world through the main central node; in other cases, even if the main central node is restored, the branch node continues to communicate with the outside world through the standby central node.

In the embodiment of the present disclosure, if the switchback waiting time is not included in the switchback configuration information, after the main center node is restored, when the branch node determines the switchback based on whether the switchback configuration information, the switchback is performed immediately; if the switchback configuration information is The switchback waiting time is included in the main center node. After the main center node is restored, the branch node can determine the switchback time based on the switchback waiting time. That is to say, when the branch node determines that it needs to switch back, wait for the switchback waiting time, and then Switch back. Among them, the switchback waiting time can be flexibly set according to actual needs, for example, set to 1 second, 10 seconds, etc.

In the DMVPN control method provided by the embodiments of the present disclosure, when the main central node fails, the standby central node provides services for branch nodes and/or central nodes in the DMVPN network. In some implementations, the main central node fails. Later, the communication can be guaranteed through the standby central node, thereby improving the stability of the DMVPN networking communication.

Embodiment two:

In order to better understand the present disclosure, the embodiments of the present disclosure provide a DMVPN control method on the basis of Embodiment 1. As shown in FIG. 3, the method includes:

S301. The first central node receives an election initiation command.

In the embodiment of the present disclosure, the DMVPN network includes two central nodes and n (n is an integer greater than or equal to 1) branch nodes, which are the first central node and the second central node, and the first central node and the second central node. Node connection. After receiving the election initiation command, the first central node transfers to S302.

S302: The first central node sends an interactive message to the second central node.

After receiving the election initiation command, the first central node sends an interactive message to the second central node to start the election process of the primary central node and the standby central node. Wherein, the interactive message includes the address identification and the group ID number of the first central node. Wherein, the address identifier is at least one of an IP address, a mac address, and the like.

S303. The second central node sends an interactive message to the first central node.

After receiving the interactive message sent by the first central node, the second central node sends the interactive message to the first central node, where the interactive message sent by the second central node includes the address identifier and group of the second central node ID number. The address identification is at least one of an IP address, a mac address, and the like. It should be noted that the address identifier in each interactive message may be the same kind of address identifier.

S304. The first central node judges whether the group ID number of the first central node is consistent with the group ID number of the second central node.

If yes, go to S305; if no, end

After the first central node receives the interactive message sent by the second central node, it extracts the group ID number and address identification of the second central node, and compares the group ID number of the second central node with its own group ID number. Compare and judge whether the two are consistent. If they are consistent, go to S305; if they are not consistent, then end.

S305. The first central node judges whether the address identifier of the first central node is greater than the address identifier of the second central node.

If yes, go to S306; if not, go to S308.

When the group ID numbers of the first central node and the second central node are the same, it indicates that the first central node and the second central node belong to the same network, and the first central node continues to identify its own address with that of the second central node Compare and determine whether the address identifier of the first central node is greater than the address identifier of the second central node, if yes, go to S306; if not, go to S308. For example, if the interactive message includes the direct interface address of the sender, it is determined whether the direct interface address of the first central node is greater than the direct interface address of the second central node, if yes, go to S306; if not, go to S308.

S306: The first central node sets the working status as the working status of the main central node, and sends a confirmation message to the second central node.

When the address identifier of the first central node is greater than the address identifier of the second central node, the first central node sets its own working status as the working status of the main central node, provides communication services for the branch nodes, and sends confirmation to the second central node Message. That is, at this time, the first central node is the main central node. Wherein, the confirmation message includes the group ID number and address identification of the sender, that is, the confirmation message here includes the group ID number and address identification of the first central node.

S307: The second central node sets its own working state as the working state of the standby central node.

After receiving the confirmation message sent by the first central node, the second central node sets its own working state to the working state of the standby central node, that is, at this time, the second central node is the standby central node.

S308: The first central node sends an interactive message to the second central node.

When the address identifier of the first central node is smaller than the address identifier of the second central node, the first central node sends an interactive message to the second central node, where the interactive message here includes the address identifier of the first central node and Group ID number.

S309. The second central node compares the address identifiers of the first central node and the second central node.

After receiving the interactive message sent by the first central node, the second central node extracts the address identifier of the first central node from the interactive message, and compares it with its own corresponding address identifier.

S310: When the address identifier of the second central node is greater than the address identifier of the first central node, the working state is set as the working state of the primary central node, and a confirmation message is sent to the first central node.

When the second central node determines that its own address identifier is greater than the address identifier of the first central node, it sets its own working state as the working state of the primary central node, and sends a confirmation message to the first central node. That is, at this time, the second central node is the main central node. Wherein, the confirmation message here may include the group ID number and address identification of the second central node, and the address identification is at least one of an IP address and a mac address.

S311: The first central node sets its own working state to the working state of the standby central node.

After receiving the confirmation message sent by the second central node, the first central node sets its own working status to the working status of the standby central node, that is, at this time, the first central node is the standby central node.

After the election of the primary center node and the backup center node is completed, if the IP address, group ID number and other information of the primary center node or backup center node changes, the center node whose information has changed will be used as the first in the S302-S311 election process. A central node initiates the election process and re-determines the main central node and the auxiliary central node.

S312. The main central node periodically sends a keep-alive message to the standby central node.

After the election of the primary central node and the standby central node is completed, the primary central node periodically sends keep-alive messages to the standby central node. For example, 3 keep-alive messages can be sent every cycle, and the cycle can be set to 10 seconds, with an interval of 3 seconds. Send a message.

S313. The branch node sends a registration request to the main central node and the standby central node based on the active-standby static routing table and the NHRP static active-standby mapping table.

After the election of the primary center node and the backup center node is completed, the branch node sends registration requests to the primary center node and the backup center node respectively based on the configured primary and backup static routing table and the NHRP static primary and backup mapping table to complete the registration request between the primary center node and the backup center node. Registration on the central node. Among them, the active and standby static routing table includes the tunnel address of the active central node and the tunnel address of the standby central node. The NHRP static active standby mapping table includes the mapping relationship between the tunnel address of the active central node and the next hop address, and the tunnel of the standby central node. The mapping relationship between the address and the next hop address.

S314. The main central node and the standby central node update their respective NHRP mapping tables based on the registration request.

After receiving the registration request sent by the branch node, the main central node updates its own NHRP mapping table to save the branch node information. After receiving the registration request sent by the branch node, the backup center node updates its own NHRP mapping table to save the branch node information. The NHRP mapping table includes the mapping relationship between the tunnel address and the next hop address.

S315. When the main central node fails, the standby central node provides communication services for the branch nodes based on the NHRP mapping table, and the branch nodes communicate with the outside through the standby central node based on the active standby static routing table and the NHRP static active standby mapping table.

In the embodiment of the present disclosure, within a preset time period, if the backup center node does not receive the keep-alive message sent by the master center node, it is determined that the master center node has failed, and the backup center node is a branch based on its stored NHRP mapping table The nodes provide communication services, and the branch nodes communicate with the outside through the standby central node based on the active-standby static routing table and the NHRP static active-standby mapping table. Among them, the primary central node periodically sends keep-alive messages to the standby central node, and the preset time period can be a cycle. For example, suppose the primary central node sends 3 keep-alive messages to the standby central node every cycle, and a cycle is 10 seconds. , The preset time can be set to 10 seconds. Within 10 seconds, if the backup center node does not receive a keep-alive message, it will provide communication services for the branch node based on the NHRP mapping table stored in it.

S316. After the main central node is restored, the branch node determines whether to switch back based on the switch back configuration information.

The active/standby static routing table and the NHRP static active/standby mapping table include the switchback configuration information. The switchback configuration information includes the switchback configuration information. After the main central node is restored, the branch nodes will be in the active/standby static routing table and the NHRP static active/standby When the switchback configuration information in the mapping table is for switchback, the main central node communicates with the outside again.

For a better understanding, here is an example for illustration. As shown in FIG. 4, the DMVPN network includes two central nodes and two branch nodes, namely a first central node 401 and a second central node 402, and the first central node 401 and the second central node 402 are connected. Among them, the group ID numbers of the first central node 401 and the second central node 402 are the same, and the direct connection port address of the first central node 401 is greater than the direct connection port address of the second central node 402. Therefore, the first central node 401 is the master The central node, the second central node 402 is a standby central node. The main and standby routing tables configured in the first branch node 403 and the second branch node 404 are shown in Table 1, which includes the GRE tunnel address and network address of the main central node, and the GRE tunnel address and network address of the standby central node. NHRP static The master-backup mapping table is shown in Table 2, which includes the NBMA (Non-Broadcast Multiple Access, non-broadcast-multiple access network) address corresponding to the GRE tunnel address of the master central node 401, and the GRE tunnel address corresponding to the backup center node 402 NBMA address. The branch node sends a registration request to the main center node 401 and the backup center node 402 to complete the registration based on the active/standby static routing table and the NHRP static active/standby mapping table. After receiving the registration request, the main center node 401 and the standby center node 402 update themselves At this time, the NHRP mapping tables of the primary central node 401 and the standby central node 402 are shown in Table 3, including the GRE tunnel addresses of the first branch node 403 and the second branch node 404 and the corresponding NBMA addresses. When the main central node is working normally, the first branch node 403 and the second branch node 404 find the tunnel address of the main central node 401 from the main-standby routing table, look up the NHRP static main-standby mapping table, perform next-hop analysis, and then After the data is encapsulated and encrypted by IPSEC, it is sent to the main central node 401, and the main central node 401 processes the received data; when the main central node 401 fails to send, the first branch node 403 and the second branch node 404 are static from the active and standby nodes Find the tunnel address of the backup center node 402 in the routing table, look up the NHRP static master/backup mapping table, perform next-hop analysis, and then send the data to the backup center node 402 after encapsulation and IPSEC encryption. The backup center node 402 compares the received Data is processed. When the main central node 401 is restored, the first branch node 403 and the second branch node 404 can communicate with the outside based on the main central node again based on the switchback configuration information in the main-standby static routing table and the NHRP static main-standby mapping table. Among them, the data encapsulation and encryption process can be seen in Figure 5.

Table 1

Table 2

table 3

In the DMVPN control method provided by the embodiments of the present disclosure, when the main central node fails, the standby central node provides services to the branch nodes in the DMVPN network. In some implementation processes, after the main central node fails, the standby central The nodes guarantee communication, thereby improving the stability of DMVPN network communication.

Example three;

The embodiments of the present disclosure are based on the first and second embodiments. A communication system is provided, which includes a main central node, a standby central node and a branch node. When the main central node fails, the standby central node provides services for the central node and/or branch node in the DMVPN network.

In the embodiment of the present disclosure, the communication system includes at least two central nodes. Among them, the node in the working state of the main central node is the main central node, and the node in the working state of the standby central node is the standby central node. It should be noted that one The central node, based on its different working status, can be the main central node or the standby central node. When the main central node is in a normal working state, the main central node is set to provide services for communication in the DMVPN network, that is, to provide services for communication between branch nodes and/or central nodes in the DMVPN network. In order to save resources, At this time, the backup center node may be in an idle state. When the main central node fails, the main central node can no longer provide services for communications in the DMVPN network. Therefore, the standby central node provides services for communications in the DMVPN network, that is, the standby central node serves as the DMVPN network The branch node and/or the central node in the communication provide service to ensure the normal communication of the DMVPN network and improve the reliability of the DMVPN network communication. It should be understood that providing services for communications in the DMVPN networking includes but is not limited to providing communications services such as data forwarding. It should be understood that, regardless of the main central node or the standby central node, the objects that provide communication services include but are not limited to branch nodes, central nodes, and the like.

In the embodiment of the present disclosure, each central node may determine whether it is a primary central node or a standby central node based on configuration information. Alternatively, each central node may also select the main central node and the standby central node based on preset election rules, where the preset election rules include, but are not limited to, that the address identifier of the primary central node is greater than the address identifier of the standby central node, or the primary center The address identifier of the node is smaller than the address identifier of the standby center node. Among them, when the preset election rule is that the address identifier of the primary center node is greater than the address identifier of the backup center node, the election process of the primary center node and the backup center node can refer to Embodiment 1, and will not be repeated here.

In the embodiment of the present disclosure, after the primary central node or the secondary central node is selected, if the identification information of the primary central node or secondary central node changes, the central node whose identification information has changed can be used as the first central node to re-initiate The main central node and the central node election process to redefine the main central node and standby central node. The identification information may be at least one of the IP address, group ID number, and mac address of the central node. For example, after the primary central node fails, the primary central node can act as the first central node to send interactive messages to the second central node (standby central node) to start the election process of the primary central node and standby central node, and redefine the primary central node. Central node and standby central node.

In the embodiment of the present disclosure, the communication system further includes a branch node. After the election of the main center node and the standby center node is completed, the branch node sends a registration request to the main center node and the standby center node to complete the registration request on the main center node and the standby center node. Registration. After receiving the registration request sent by the branch node, the main central node updates the NHRP mapping table of the main central node based on the registration request; the standby central node updates the NHRP mapping of the standby central node based on the registration request after receiving the registration request sent by the branch node table. Among them, the NHRP mapping table includes the mapping relationship between the tunnel address and the next hop address.

In the communication system provided by the embodiments of the present disclosure, when the main central node fails, the standby central node provides services for branch nodes and/or central nodes in the DMVPN network. In some implementations, after the main central node fails , The communication can be ensured through the standby central node, thereby improving the stability of DMVPN networking communication.

Embodiment four:

The embodiment of the present disclosure also provides a network device, as shown in FIG. 6, including: a first processor 601, a first memory 602, and a first communication bus 603; the first communication bus 603 is configured to implement the first processor Connection communication between 601 and the first memory 602; the first processor 601 is configured to execute one or more computer programs stored in the first memory 602 to implement the DMVPN control as described in the first and second embodiments At least one step of the central node in the method. It should be noted that a network device, according to different working states, when in the working state of the main central node, it is the main central node device; when in the working state of the standby central node, it is the standby central node device.

The embodiment of the present disclosure also provides a network device, as shown in FIG. 7, including: a second processor 701, a second memory 702, and a second communication bus 703; the second communication bus 703 is configured to implement the second processor 701 and the second memory 702 for connection and communication; the second processor 701 is configured to execute one or more computer programs stored in the second memory 702, so as to implement the steps described in the first and second embodiments At least one step of the branch node in the DMVPN control method.

The embodiments of the present disclosure also provide a storage medium, which includes volatile or non-volatile data implemented in any method or technology for storing information (such as computer-readable instructions, data structures, computer program modules, or other data). Non-volatile, removable or non-removable media. Computer readable storage media include but are not limited to RAM (Random Access Memory), ROM (Read-Only Memory, read-only memory), EEPROM (Electrically Erasable Programmable read only memory, charged Erasable Programmable Read-Only Memory) ), flash memory or other storage technology, CD-ROM (Compact Disc Read-Only Memory), digital versatile disk (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage or other magnetic storage devices, Or any other medium that can be used to store desired information and can be accessed by a computer.

The storage medium stores one or more computer programs, and the one or more computer programs can be executed by one or more processors to implement the central node or the central node in the DMVPN control method described in the first and second embodiments. Steps to branch nodes.

In the network equipment and storage medium provided by the embodiments of the present disclosure, when the main central node fails, the standby central node provides services for the branch nodes and/or central nodes in the DMVPN network. In some implementations, the main central node After the mode fails, the communication can be ensured through the standby central node, thereby improving the stability of the DMVPN network communication.

It can be seen that those skilled in the art should understand that all or some of the steps, functional modules/units in the system and the device in the method disclosed above can be implemented as software (which can be implemented by computer program code executable by a computing device ), firmware, hardware and their appropriate combination. In hardware implementations, the division between functional modules/units mentioned in the above description does not necessarily correspond to the division of physical components; for example, one physical component may have multiple functions, or one function or step may consist of several physical components. The components are executed cooperatively. Some physical components or all physical components can be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or as hardware, or as an integrated circuit, such as an application specific integrated circuit .

In addition, as is well known to those of ordinary skill in the art, communication media usually contain computer-readable instructions, data structures, computer program modules, or other data in a modulated data signal such as a carrier wave or other transmission mechanism, and may include any information delivery medium. Therefore, the present disclosure is not limited to any specific hardware and software combination.

The above content is a further detailed description of the embodiments of the present disclosure in combination with specific implementations, and it cannot be considered that the specific implementations of the present disclosure are limited to these descriptions. For those of ordinary skill in the technical field to which the present disclosure belongs, several simple deductions or substitutions can be made without departing from the concept of the present disclosure, which should be regarded as falling within the protection scope of the present disclosure.

Industrial applicability

According to the DMVPN control method, network equipment, communication system and storage medium provided by the embodiments of the present disclosure, when the main central node fails, the standby central node provides services for the branch nodes and/or central nodes in the DMVPN network. In the implementation process, after the main central node fails, the standby central node can ensure communication, thereby improving the stability of DMVPN network communication.

Claims

A dynamic multipoint virtual private network DMVPN control method, the DMVPN control method includes:

When the main central node fails, the standby central node provides services for branch nodes and/or central nodes in the DMVPN network.
The DMVPN control method according to claim 1, further comprising an election process of the main central node and the standby central node, and the election process of the main central node and the standby central node includes:

The first central node sends an interactive message including a local address identifier to the second central node, where the address identifier includes a direct connection port address and/or a device loopback address;

After receiving the interactive message sent by the first central node, the second central node sends an interactive message including the local address identifier to the first central node;

When the address identifier of the first central node at the local end is greater than the address identifier of the second central node, set the working status to the working status of the primary central node, and send a confirmation message to the second central node;

After receiving the confirmation message sent by the first central node, the second central node sets the working state to the working state of the standby central node.
The DMVPN control method according to claim 2, further comprising:

When the address identifier of the local end of the first central node is smaller than the address identifier of the first central node, sending an interactive message including the local address identifier to the second central node;

When the address identifier of the local end of the second central node is greater than the address identifier of the first central node, the working state is set as the working state of the primary central node, and a confirmation message is sent to the first central node;

After receiving the confirmation message sent by the first central node, the first central node sets the working state to the working state of the standby central node.
3. The DMVPN control method according to claim 2, wherein the interactive message further includes the group ID number of the sender;

The method also includes:

The first central node extracts the address identification and group ID number of the second central node from the interactive message sent by the second central node, the group ID number at the local end and the group ID of the second central node When the numbers are the same and the address identifier of the local end is greater than the address identifier of the second central node, the working state is set as the working state of the main central node, and a confirmation message is sent to the second central node.
The DMVPN control method according to claim 2, further comprising:

After the identification information of the primary central node or the backup central node changes, the central node whose identification information has changed serves as the first central node to re-elect the primary central node and the secondary central node. The identification information includes an IP address, At least one of group ID number and mac address.
The DMVPN control method according to claim 1, further comprising:

The main central node periodically sends keep-alive messages to the standby central node;

When the standby central node does not receive the keep-alive message within a preset time period, it is determined that the primary central node is faulty and provides services for the branch nodes and/or central nodes in the DMVPN network.
The DMVPN control method according to any one of claims 1 to 6, further comprising:

The branch node sends a registration request to the main central node and the standby central node to complete the registration on the main central node and the standby central node based on the configured active and standby routing table and the NHRP active standby mapping table, respectively, The active/standby routing table includes the route of the active central node and the route of the standby central node, and the NHRP active/standby mapping table includes the mapping relationship between the tunnel address of the active central node and the next hop address, and all State the mapping relationship between the tunnel address of the central node and the next hop address;

The main central node updates the NHRP mapping table of the main central node based on the registration request;

The backup center node updates the NHRP mapping table of the backup center node based on the registration request.
The DMVPN control method according to claim 7, wherein the active/standby routing table and/or the NHRP active/standby mapping table includes switchback configuration information, and the switchback configuration information includes whether to switch back configuration information and/or For the switchback waiting time, the method further includes:

After the main central node is restored, the branch node determines whether to switch back from communicating with the outside world through the standby central node to communicating with the outside through the main central node based on the switch-back configuration information, based on all The switchback waiting time is described to determine the switchback time.
A network device includes: a first processor, a first memory, and a first communication bus;

The first communication bus is configured to realize connection and communication between the first processor and the first memory;

The first processor is configured to execute one or more computer programs stored in the first memory to implement the steps of the central node in the DMVPN control method according to any one of claims 1 to 8.
A network device includes: a second processor, a second memory, and a second communication bus;

The second communication bus is configured to realize connection and communication between the second processor and the second memory;

The second processor is configured to execute one or more computer programs stored in the second memory to implement the step of the branch node in the DMVPN control method according to any one of claims 1 to 8.
A storage medium, the storage medium stores one or more computer programs, and the one or more computer programs can be executed by one or more processors to implement the one or more of claims 1 to 8 The step of the central node or the branch node in the DMVPN control method.