WO2023024867A1 - 跨设备链路聚合组网的网络诊断方法及网络接入设备 - Google Patents

跨设备链路聚合组网的网络诊断方法及网络接入设备 Download PDF

Info

Publication number
WO2023024867A1
WO2023024867A1 PCT/CN2022/110393 CN2022110393W WO2023024867A1 WO 2023024867 A1 WO2023024867 A1 WO 2023024867A1 CN 2022110393 W CN2022110393 W CN 2022110393W WO 2023024867 A1 WO2023024867 A1 WO 2023024867A1
Authority
WO
WIPO (PCT)
Prior art keywords
network access
access device
network
response message
message
Prior art date
Application number
PCT/CN2022/110393
Other languages
English (en)
French (fr)
Inventor
周琼
Original Assignee
中兴通讯股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中兴通讯股份有限公司 filed Critical 中兴通讯股份有限公司
Publication of WO2023024867A1 publication Critical patent/WO2023024867A1/zh

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L43/00—Arrangements for monitoring or testing data switching networks
    • H04L43/08—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters
    • H04L43/0805—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability
    • H04L43/0811—Monitoring or testing based on specific metrics, e.g. QoS, energy consumption or environmental parameters by checking availability by checking connectivity
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y02—TECHNOLOGIES OR APPLICATIONS FOR MITIGATION OR ADAPTATION AGAINST CLIMATE CHANGE
    • Y02D—CLIMATE CHANGE MITIGATION TECHNOLOGIES IN INFORMATION AND COMMUNICATION TECHNOLOGIES [ICT], I.E. INFORMATION AND COMMUNICATION TECHNOLOGIES AIMING AT THE REDUCTION OF THEIR OWN ENERGY USE
    • Y02D30/00—Reducing energy consumption in communication networks
    • Y02D30/50—Reducing energy consumption in communication networks in wire-line communication networks, e.g. low power modes or reduced link rate

Definitions

  • the embodiments of the present application relate to the field of communication transmission, and in particular to a network diagnosis method and a network access device for cross-device link aggregation networking.
  • Multi-Chassis Link Aggregation Group is a mechanism to realize cross-device link aggregation. It is based on the extension of Link Aggregation Control Protocol (LACP) and can form cross- Link aggregation protection and load sharing of devices.
  • LACP Link Aggregation Control Protocol
  • MC-LAG is a typical dual-homing access scenario.
  • the user-side device such as a server
  • the access device In the MC-LAG network (that is, the above-mentioned active-active system), when using the packet explorer (Packet Internet Groper, ping) on the MC-LAG device to detect and diagnose the network, due to the cross-device link aggregation network
  • the access device is in load sharing mode, and there may be path problems that cause the device to report a ping detection failure, and then diagnose an abnormal network connection, but the actual network connection status is normal. That is, the network diagnosis accuracy of the cross-device link aggregation network is low.
  • An embodiment of the present application provides a network diagnosis method for cross-device link aggregation networking, which is applied to the first network access device in the cross-device link aggregation networking, and the cross-device link aggregation networking also includes The second network access device, the method includes: receiving a message sent by an upstream or downstream device communicatively connected with the first network access device; ) response message to the second network access device, for the second network access device to recognize that the target network access device of the ICMP response message is the second network access device , obtaining a network diagnosis result according to the ICMP reply message.
  • the embodiment of the present application also provides a network diagnosis device for cross-device link aggregation networking, the network diagnosis device is applied to the first network access device in the cross-device link aggregation networking, and the cross-device link aggregation network
  • the aggregation network also includes a second network access device, and the network diagnosis device includes: a receiving module, configured to receive a message sent by an upstream device or a downstream device that is communicatively connected to the first network access device; a forwarding module , for sending the ICMP response message in the message to the second network access device, so that the second network access device identifies the target network access device of the ICMP response message After accessing the device for the second network, obtain a network diagnosis result according to the ICMP response message.
  • the embodiment of the present application also provides a network access device, including: at least one processor; and a memory connected in communication with the at least one processor; wherein, the memory stores information that can be accessed by the at least one processor Executable instructions, the instructions are executed by the at least one processor, so that the at least one processor can execute the above-mentioned network diagnosis method for cross-device link aggregation networking.
  • the embodiment of the present application also provides a computer-readable storage medium storing a computer program, and when the computer program is executed by a processor, the above-mentioned network diagnosis method for cross-device link aggregation networking is implemented.
  • FIG. 1 is a flow chart of a network diagnosis method for cross-device link aggregation networking provided according to an embodiment of the present application
  • FIG. 2 is a first schematic diagram of a network diagnosis method for cross-device link aggregation networking provided according to an embodiment of the present application
  • FIG. 3 is a second schematic diagram of a network diagnosis method for cross-device link aggregation networking provided according to an embodiment of the present application
  • FIG. 4 is a schematic diagram of a network diagnosis device provided according to an embodiment of the present application.
  • Fig. 5 is a schematic diagram of a network access device provided according to an embodiment of the present application.
  • first and second in the embodiments of the present application are used for description purposes only, and cannot be understood as indicating or implying relative importance or implicitly indicating the quantity of indicated technical features. Thus, the features defined as “first” and “second” may explicitly or implicitly include at least one of these features.
  • the terms “including” and “having” and any variations thereof are intended to cover non-exclusive inclusion. For example, a system, product or equipment comprising a series of components or units is not limited to the listed components or units, but optionally also includes components or units not listed, or optionally also includes Other parts or units inherent in equipment.
  • “plurality” means at least two, such as two, three, etc., unless otherwise specifically defined.
  • the processing of packets is load sharing, that is to say, network access device A and network access device B are configured with the same gateway IP address and MAC address.
  • the return packet of the ping message may be forwarded to network access device B, causing network access device A to fail to receive the return packet of the ping message and return the detection failure message. result.
  • An embodiment of the present application relates to a network diagnosis method for cross-device link aggregation networking. It is applied to the first network access device in the cross-device link aggregation network, which also includes the second network access device. The specific process is shown in FIG. 1 .
  • Step 101 receiving a message sent by an upstream device or a downstream device communicatively connected to the first network access device;
  • Step 102 sending the ICMP response message in the message to the second network access device, so that the second network access device recognizes that the target network access device of the ICMP response message is the second network access device , obtain the network diagnosis result according to the ICMP response message.
  • the network access device in the cross-device link aggregation network receives the message sent by the upstream or downstream device, it forwards the ICMP response message in the message, so that the network access device in the cross-device link aggregation network All network access devices receive the ICMP response message.
  • the network access devices in the cross-device link aggregation network are not affected by the path, and can obtain ICMP response messages, which can improve the accuracy of network diagnosis in the cross-device link aggregation network.
  • step 101 a message sent by an upstream device or a downstream device communicatively connected to the first network access device is received.
  • the device After planning and deploying basic services in MC-LAG scenarios, such as MC-LAG configuration, IP, VLAN, and MAC configurations, the device receives packets sent by neighbor devices during official operation. Neighboring devices include upstream devices and downstream devices. The upstream devices are, for example, network management devices, and the downstream devices are, for example, servers. In the MC-LAG scenario, the first network access device will receive various packets sent by neighboring devices. In one example, among the received packets, it will identify the ICMP response packets that need to be operated, so as to facilitate subsequent processing. It performs targeted treatment.
  • the network access device is, for example, a switch.
  • the ACL entry is used to identify the Internet protocol of the ICMP response message Version, the Internet protocol version includes ipv4 and ipv6.
  • the identified Internet protocol version is used in the transmission process of the ICMP reply message.
  • the pre-parameters are preset values. When it is necessary to use ping to diagnose the network, first match the response message according to the pre-parameters to obtain two ACL entries, which are used to manage data sending and receiving in the first network access device. One of the ACL entries is used to match IPv4 ICMP reply packets, and the other ACL entry is used to match IPv6 ICMP reply packets.
  • the pre-parameter is enabled so that the first network access device generates two ACL entries, or obtains the two ACL entries from the pre-parameter.
  • step 102 the ICMP response message is sent to the second network access device, so that after the second network access device recognizes that the target network access device of the ICMP response message is the second network access device, according to ICMP response packets to obtain network diagnosis results.
  • the ICMP reply message is sent to the second network access device according to the mode corresponding to the Internet Protocol version.
  • identify the source of the ICMP response message and send the ICMP response message in the message to the The second network access device. For example: send the ICMP response message to the second network access device according to the source and control parameters of the ICMP response message; the control parameters store the message sending methods corresponding to each source; wherein, if the ICMP response message comes from the upstream device, Then perform redirection processing on the ICMP response message, and send the redirected ICMP response message to the second network access device; if the ICMP response message comes from a downstream device, perform flow mirroring processing on the ICMP response message, Send the ICMP response packet processed by the flow mirroring to the second network access device. In addition, it can also be sent in combination with the identified Internet Protocol version of the ICMP response message.
  • the corresponding relationship between the preset source and the message sending method determines the processing action for the received ipv4/ipv6 ICMP response message, for example, it includes two processing actions: mc-lag ping flow mirroring and mc-lag Ping redirection, this control parameter can be enabled (used) under VLAN, physical port or aggregation port to mirror or redirect a copy of the received ipv4/ipv6icmp response message flow to the peerlink port and forward it to the second network interface into the device for processing.
  • the corresponding relationship between the source and the sending method of the message can also be obtained from the ACL entry, that is, through the ACL to identify and match the ICMP reply message, for example, an ACL entry rule 1 permit icmp any any echo-reply (ipv4 and ipv6 are Two different rules), referring to the icmp message in response to echo-reply.
  • the ACL entry is obtained according to the pre-parameters, and the ACL entry is applied to the first port according to the control parameters.
  • the first port receives a message that matches the ACL entry, it will perform a predetermined action, such as the first When the port receives an icmp reply message, it performs flow mirroring actions, etc.
  • the ICMP reply message is from an upstream device
  • redirection processing is performed on the ICMP reply message
  • the redirected ICMP reply message is sent to the second network access device. Since the first network access device and the second network access device are two devices with different addresses for the upstream device, when the ICMP reply message is transmitted to the second network access device, the ICMP reply message needs to be changed. The destination address of the message, that is, the redirection function is performed on the ICMP reply message.
  • the redirection function may be performed on the upstream-facing VLAN or port of the first network access device, and the following rules may be issued:
  • the first network access device receives the ipv4 /ipv6
  • the next-hop ip address of the ICMP response message will be redirected to the second network access device, for example, the ICMP response message will be directed to the peerlink port and forwarded through the peerlink port Access the device to the second network.
  • the first network access device before performing redirection processing on the ICMP response message, sends the ICMP response message to the CPU of the first network access device according to a conventional process, if the first network access device Identifying that the target network access device of the ICMP response message is the first network access device, the first network access device obtains the network diagnosis result according to the ICMP response message; in addition, after identifying the first network access device as the target After the network access device, it may not affect the behavior of the first network access device sending an ICMP response message to the second network access device, that is, the sending can be implemented to reduce the complexity of the preset execution rules, or it can not be implemented Send to reduce redundant data in the system.
  • network access device A and network access device B are located in the MC-LAG system.
  • the upstream device for example, the remote server on the network side
  • receives the ping packet detection message
  • the reply ICMP reply message may be forwarded to the network access device B according to the load balancing of the route.
  • the redirection of the next-hop IP address is forwarded to the network access device A by the peerlink port. Since the redirected message is checked in the ARP table according to the next-hop IP address, the destination mac is modified to be the rack mac of the network access device A. Therefore, the network Access device A receives the redirected ICMP reply message and sends it to the CPU for processing, and feedbacks whether the ping is successful.
  • the ICMP reply message is from a downstream server
  • flow mirroring processing is performed on the ICMP reply message
  • the ICMP reply message after flow mirroring is sent to the second network access device. Since the first network access device and the second network access device are two devices with the same address for the downstream device, such as the downstream server, when the ICMP response message is transmitted to the second network access device, no Change the relevant data of the ICMP reply message, that is, perform flow mirroring processing on the ICMP reply message.
  • the flow mirroring function may be executed on the downstream-facing VLAN or port of the first network access device, and the following rules may be issued:
  • the device receives an ipv4/ipv6 ICMP response message, it mirrors a copy of the ICMP response message to the peerlink port, and forwards it to the second network access device through the peerlink port.
  • the first network access device before performing flow mirroring processing on the ICMP response message, sends the ICMP response message to the CPU of the first network access device according to a conventional process, if the first network access device Identifying that the target network access device of the ICMP response message is the first network access device, the first network access device obtains the network diagnosis result according to the ICMP response message; in addition, after identifying the first network access device as the target After the network access device, it may not affect the behavior of the first network access device to send a message to the second network access device, that is, the sending can be implemented to reduce the complexity of the preset execution rules, or the sending can not be performed. Reduce redundant data in the system.
  • network access device A, network access device B and the downstream server are located in the MC-LAG system.
  • the server may forward the ICMP reply packet to the Network access device B, when network access device B receives an ICMP response message, it sends the message locally to the CPU for processing, and at the same time mirrors a copy of the message to the peerlink port, and forwards it to network access device A through the peerlink port.
  • Network access device A and network access device B use the same gateway IP and MAC address for the downstream server, so network access device A and network access device B have the same gateway IP and MAC address for the downstream server, Network access device A receives the mirrored ICMP response message and sends it to the CPU for processing, and feedbacks whether the ping is successful.
  • the second network access device after sending the ICMP response packet to the second network access device, further include deleting related rules generated during flow mirroring or redirection, deleting ACL entries, and the like. That is, after the message is processed, redundant data is deleted to save storage space and improve device usage efficiency.
  • the network diagnosis method for cross-device link aggregation networking in this embodiment is specifically described by using an interaction process between specific network access devices.
  • the corresponding downstream device is server1
  • network access device C and network access device D are located in the same MC-LAG system
  • the implementation process of this solution is as follows:
  • MC-LAG service basic configuration such as MC-LAG port configuration, MC-LAG port VLAN configuration, MC-LAG port Layer 3 IP and anycast mac configuration, MC-LAG uplink Layer 3 interface and routing configuration, etc.
  • MC-LAG port configuration such as MC-LAG port configuration, MC-LAG port VLAN configuration, MC-LAG port Layer 3 IP and anycast mac configuration, MC-LAG uplink Layer 3 interface and routing configuration, etc.
  • obtain two ACL rules to match the ipv4/ipv6 ICMP response message for example, enable the pre-parameters so that network access device A locally issues two ACL rules to network access device A .
  • the received ICMP reply message comes from server1, enable the mc-lag ping flow mirroring function on the VLAN or port on the downstream side (MC-LAG access side) of network access device A, and deliver the rule: connect MC-LAG
  • the inbound VLAN or port receives an ipv4/ipv6 ICMP response packet and mirrors it to the peerlink port. Ping the local server server1 on the access side on the network access device A. If the ICMP response packet replied by server1 is forwarded to the network access device B, after the network access device B receives the ICMP response packet, it will send the message locally to the CPU. process, and mirror a copy of the message to the peerlink port and forward it to network access device A.
  • Network access device A receives the mirrored icmp response message and sends it to the CPU for processing, enabling network access device A to ping Return success. And after returning successfully, delete the mc-lag ping control parameter, and also delete the relevant rules of the mc-lag ping flow mirroring function.
  • the received ICMP reply message comes from server2, enable the mc-lag redirection function on the VLAN or port on the upstream side (MC-LAG network side) of network access device A, and issue rules to redirect the MC-LAG network side VLAN Or the ipv4/ipv6 ICMP reply message received by the port is redirected to the peerlink port according to the specified next hop ip; on the network access device A, ping the remote server server2 on the network side, if the ICMP reply message replied by server2 is based on the route
  • the network access device B receives the ICMP response message, it sends the message to the CPU locally for processing, and redirects the message from the peerlink port to the network access device according to the specified next-hop IP address.
  • the network access device A receives the redirected ICMP response message and sends it to the CPU for processing, and the ping operation of the network access device A returns success. After returning successfully, delete the mc-lag ping control parameter, and delete the relevant rules of the mc-lag ping redirection function.
  • delete the pre-parameters, control parameters, etc. can also be called disabling the MC-LAG pre-parameters, control parameters, etc., and delete the related ACL entries.
  • network access device A and network access device B form an MC-LAG system to connect to the sg11 port of server server1, and add network access device A and network access device B to vlan 10 (Fig. not shown), the uplink connects to the aggregation device E through a traditional layer-3 interface.
  • the network access device C and the network access device D form an MC-LAG system to connect with the sg12 port of the server server2, and add the network access device C and the network access device D to vlan 20 (not shown in the figure),
  • the uplink connects to the convergence device E through a traditional Layer 3 interface.
  • Server1 is configured with ip address 10.1.1.2
  • network access device A and network access device B are configured with gateway ip address 10.1.1.1 and anycast mac 000.1111.1111.
  • Server2 is configured with ip address 20.1.1.2
  • network access device C and network access device D are configured with gateway ip address 20.1.1.1 and anycast mac 0000.2222.2222.
  • the peerlink layer 3 ip address of network access device A is configured as 30.1.1.1
  • the peerlink layer 3 ip address of network access device B is configured as 30.1.1.2
  • the peerlink layer 3 ip address of network access device C is configured as 30.2.1.1
  • the peerlink layer-3 ip address of network access device D is configured as 30.2.1.2.
  • the peerlink channel between network access device A and network access device B belongs to vlan254, and the ip address is configured as 30.1.1.0/24; the peerlink channel between network access device C and network access device D belongs to vlan255, The ip address is configured as 30.2.1.0/24.
  • Do the following configuration on network access device B According to the pre-parameters, obtain ACL entries, that is, enable mc-lag ping pre-parameter configuration, and trigger network access device B to internally send matching ipv4/ipv6 ICMP response packets the ACL entry; configure the mc-lag ping flow mirroring function under the vlan10 or sg11 port; on the uplink port (port4) of the network access device B, that is, the port on the network access device B that performs signal transmission with the device E, Configure the mc-lag ping redirection function, and specify the next hop as the peerlink Layer 3 interface address 30.1.1.1 of network access device A.
  • Ping the 20.1.1.2 address of the remote server server2 on the network access device A, and the source address of the selected ping packet is 10.1.1.1. If server2 replies with an ICMP response message and forwards it to the network access device A, the network access device A Receive the ICMP response message and send it to the CPU, and the ping returns successfully.
  • network access device B receives The ICMP reply message is sent locally to the CPU for processing, and the destination mac of the message is modified to the mac address corresponding to arp 30.1.1.1, and the message is redirected to the network access device A through the peerlink port, and the network access device A After receiving the redirected ICMP reply message and sending it to the CPU, the ping of network access device A returns success.
  • Ipv6 network is the same as that of ipv4, and will not be listed here.
  • the network access device in the cross-device link aggregation network after the network access device in the cross-device link aggregation network receives the message sent by the upstream or downstream device, it forwards the ICMP response message in the message, so that the cross-device link aggregation network All network access devices receive the ICMP response message. Avoid the network access device that receives the ICMP response message from the network access device that originally sent the ICMP test message due to the load sharing of the message in the cross-device link aggregation network, and then feedbacks the network anomaly This problem; the network access devices in the cross-device link aggregation network are not affected by the path, and can obtain ICMP response messages, which improves the accuracy of network diagnosis in the cross-device link aggregation network.
  • An embodiment of the present application relates to a network diagnosis device for cross-device link aggregation networking.
  • the network diagnosis device is applied to the first network access device in the cross-device link aggregation network, and the cross-device link aggregation network also includes a second network access device, and the network diagnosis device includes:
  • a receiving module 201 configured to receive a message sent by an upstream device or a downstream device communicatively connected to the first network access device;
  • the forwarding module 202 is configured to send the ICMP response message in the message to the second network access device, so that the second network access device recognizes that the target network access device of the ICMP response message is the second network access device. After entering the device, obtain the network diagnosis result according to the ICMP reply message.
  • the receiving module 201 also includes matching the response message according to the pre-parameters, and obtaining the ACL entry corresponding to the response message; the ACL entry is used to identify the Internet Protocol version of the ICMP response message .
  • the sending the ICMP response message to the second network access device includes: sending the ICMP response message to the second network access device, for example: according to the identification The IP version is received, and the ICMP response message is sent to the second network access device.
  • the sending the ICMP response message to the second network access device includes: identifying the source of the ICMP response message; according to the identified source, and according to the preset The corresponding relationship between the source and the message sending mode, sending the ICMP response message in the message to the second network access device.
  • the network access device is, for example, a switch.
  • the ICMP reply message in the message is sent to the second network access equipment, including: if the ICMP response message is from the upstream device, perform redirection processing on the ICMP response message, and send the redirected ICMP response message to the second network access device; if the ICMP response message is from the downstream server, perform flow mirroring processing on the ICMP response message, and send the ICMP response message after the flow mirroring to the second network access device.
  • performing redirection processing on the ICMP response message, and sending the ICMP response message to the second network access device includes: sending the next hop of the ICMP response message changing the address to the second network access device; sending the changed ICMP response message to the second network access device through a peerlink port.
  • performing flow mirroring processing on the ICMP response message, and sending the ICMP response message to the second network access device includes: mirroring and copying the ICMP response message; The mirror copy result is sent to the second network access device through a peerlink port.
  • a network diagnosis result is obtained according to the ICMP response message.
  • the network access device in the inter-device link aggregation network after the network access device in the inter-device link aggregation network receives the message sent by the upstream or downstream device, it forwards the ICMP response message in the message, so that the inter-device link aggregation group All network access devices in the network receive the ICMP response message. Avoid the network access device that receives the ICMP response message from the network access device that originally sent the ICMP test message due to the load sharing of the message in the cross-device link aggregation network, and then feedbacks the network anomaly This problem; the network access devices in the cross-device link aggregation network are not affected by the path, and can obtain ICMP response messages, which improves the accuracy of network diagnosis in the cross-device link aggregation network.
  • this embodiment is a system embodiment corresponding to the above embodiment, and this embodiment can be implemented in cooperation with the above embodiment.
  • the relevant technical details mentioned in the first embodiment are still valid in this embodiment, and will not be repeated here in order to reduce repetition.
  • the relevant technical details mentioned in this implementation manner may also be applied in the foregoing implementation manners.
  • modules involved in this embodiment are logical modules.
  • a logical unit can be a physical unit, or a part of a physical unit, or multiple physical units. Combination of units.
  • units that are not closely related to solving the technical problems proposed in the present application are not introduced in this embodiment, but this does not mean that there are no other units in this embodiment.
  • step division of the above various methods is only for the sake of clarity of description. During implementation, it can be combined into one step or some steps can be split and decomposed into multiple steps. As long as they include the same logical relationship, they are all within the scope of protection of this patent. ; Adding insignificant modifications or introducing insignificant designs to the algorithm or process, but not changing the core design of the algorithm and process are all within the scope of protection of this patent.
  • An embodiment of the present application relates to a network access device, as shown in FIG. 5 , including at least one processor 301; and,
  • the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, so that the at least one processor can perform the above-mentioned cross-device link aggregation networking network diagnosis method.
  • the memory and the processor are connected by a bus
  • the bus may include any number of interconnected buses and bridges, and the bus connects one or more processors and various circuits of the memory together.
  • the bus may also connect together various other circuits such as peripherals, voltage regulators, and power management circuits, all of which are well known in the art and therefore will not be further described herein.
  • the bus interface provides an interface between the bus and the transceivers.
  • a transceiver may be a single element or multiple elements, such as multiple receivers and transmitters, providing means for communicating with various other devices over a transmission medium.
  • the data processed by the processor is transmitted on the wireless medium through the antenna, further, the antenna also receives the data and transmits the data to the processor.
  • the processor is responsible for managing the bus and general processing, and can also provide various functions, including timing, peripheral interface, voltage regulation, power management, and other control functions. Instead, memory can be used to store data that the processor uses when performing operations.
  • One embodiment of the present application relates to a computer-readable storage medium storing a computer program.
  • the above method embodiments are implemented when the computer program is executed by the processor.
  • a storage medium includes several instructions to make a device ( It may be a single-chip microcomputer, a chip, etc.) or a processor (processor) to execute all or part of the steps of the methods described in the various embodiments of the present application.
  • the aforementioned storage media include: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disc, etc., which can store program codes. .

Abstract

本申请实施例涉及通信传输领域，特别涉及一种跨设备链路聚合组网的网络诊断方法及网络接入设备。其中，网络诊断方法应用于跨设备链路聚合组网中的第一网络接入设备，跨设备链路聚合组网中还包括第二网络接入设备，包括：接收与第一网络接入设备通信连接的上游设备或下游设备发送的报文；将报文中的ICMP应答报文发送至第二网络接入设备，以供第二网络接入设备在识别到ICMP应答报文的目标网络接入设备为第二网络接入设备后，根据ICMP应答报文获取网络诊断结果。

Description

跨设备链路聚合组网的网络诊断方法及网络接入设备
交叉引用
本申请基于申请号为“202110968835.6”、申请日为2021年08月23日的中国专利申请提出，并要求该中国专利申请的优先权，该中国专利申请的全部内容在此以引入方式并入本申请。
技术领域
本申请实施例涉及通信传输领域，特别涉及一种跨设备链路聚合组网的网络诊断方法及网络接入设备。
背景技术
多机架链路聚合(Multi-Chassis Link Aggregation Group，MC-LAG)，是实现跨设备链路聚合的机制，是基于链路汇聚控制协议(Link Aggregation Control Protocol，LACP)的扩展，能够形成跨设备的链路聚合保护和负载分担。MC-LAG是典型的双归接入场景，用户侧设备(例如服务器)通过MC-LAG机制与另外两台设备(例如两台网络接入设备)进行跨设备链路聚合，共同组成一个双活系统，这样可以实现跨设备的流量负载分担转发。
在MC-LAG组网(即上述双活系统)中，当在MC-LAG设备上利用网包探索器(Packet Internet Groper，ping)进行检测诊断网络时，由于跨设备链路聚合组网中网络接入设备为负载分担模式，可能会存在路径问题导致设备反馈ping检测失败，进而诊断网络连接异常，但实际上网络连接状态是正常的。即，跨设备链路聚合组网的网络诊断的准确性较低。
发明内容
本申请实施例提供了一种跨设备链路聚合组网的网络诊断方法，应用于跨 设备链路聚合组网中的第一网络接入设备，所述跨设备链路聚合组网中还包括第二网络接入设备，所述方法包括：接收与所述第一网络接入设备通信连接的上游或下游设备发送的报文；将所述报文中的控制协议(Internet Control Message Protocol，ICMP)应答报文发送至所述第二网络接入设备，以供所述第二网络接入设备在识别到所述ICMP应答报文的目标网络接入设备为所述第二网络接入设备后，根据所述ICMP应答报文获取网络诊断结果。
本申请实施例还提供了一种跨设备链路聚合组网的网络诊断装置，所述网络诊断装置应用于跨设备链路聚合组网中的第一网络接入设备，所述跨设备链路聚合组网中还包括第二网络接入设备，所述网络诊断装置包括：接收模块，用于接收与所述第一网络接入设备通信连接的上游设备或下游设备发送的报文；转发模块，用于将所述报文中的ICMP应答报文发送至所述第二网络接入设备，以供所述第二网络接入设备在识别到所述ICMP应答报文的目标网络接入设备为所述第二网络接入设备后，根据所述ICMP应答报文获取网络诊断结果。
本申请实施例还提供了一种网络接入设备，包括：至少一个处理器；以及，与所述至少一个处理器通信连接的存储器；其中，所述存储器存储有可被所述至少一个处理器执行的指令，所述指令被所述至少一个处理器执行，以使所述至少一个处理器能够执行上述的跨设备链路聚合组网的网络诊断方法。
本申请实施例还提供了一种计算机可读存储介质，存储有计算机程序，所述计算机程序被处理器执行时实现上述的跨设备链路聚合组网的网络诊断方法。
附图说明
图1是根据本申请的一个实施例提供的跨设备链路聚合组网的网络诊断方法的流程图；
图2是根据本申请的一个实施例提供的跨设备链路聚合组网的网络诊断方法的示意图一；
图3是根据本申请的一个实施例提供的跨设备链路聚合组网的网络诊断方法的示意图二；
图4是根据本申请的一个实施例提供的网络诊断装置的示意图；
图5是根据本申请的一个实施例提供的网络接入设备的示意图。
具体实施方式
为使本申请实施例的目的、技术方案和优点更加清楚，下面将结合附图对本申请的各实施例进行详细的阐述。然而，本领域的普通技术人员可以理解，在本申请各实施例中，为了使读者更好地理解本申请而提出了许多技术细节。但是，即使没有这些技术细节和基于以下各实施例的种种变化和修改，也可以实现本申请所要求保护的技术方案。以下各个实施例的划分是为了描述方便，不应对本申请的具体实现方式构成任何限定，各个实施例在不矛盾的前提下可以相互结合相互引用。
本申请实施例中的术语“第一”、“第二”仅用于描述目的，而不能理解为指示或暗示相对重要性或者隐含指明所指示的技术特征的数量。由此，限定有“第一”、“第二”的特征可以明示或者隐含地包括至少一个该特征。本申请的描述中，术语“包括”和“具有”以及它们任何变形，意图在于覆盖不排他的包含。例如包含了一系列部件或单元的系统、产品或设备没有限定于已列出的部件或单元，而是可选地还包括没有列出的部件或单元，或可选地还包括对于这些产品或设备固有的其它部件或单元。本申请的描述中，“多个”的含义是至少两个，例如两个，三个等，除非另有明确具体的限定。
在一些例子中，当在MC-LAG设备上进行ping检测诊断网络时，由于MC-LAG组网中网络接入设备并不是独立使用IP地址及MAC地址，所以会出现用于实现ping检测的报文数据的去包和回包路径不一致，从而导致ping检测失败，影响诊断结果的准确性。如网络接入设备A和网络接入设备B与服务器对接配置MC-LAG，对于报文的处理为负载分担方式，也就是说网络接入设备A和网络接入设备B配置了相同的网关IP地址和MAC地址。当在网络接入设备A上进行ping检测时，ping报文的回包可能被转发到了网络接入设备B，导致网络接入设备A收不到ping报文的回包而返回检测失败这一结果。
对于上述问题，本申请提供了如下实施方式：
本申请的一个实施方式涉及一种跨设备链路聚合组网的网络诊断方法。应用于跨设备链路聚合组网中的第一网络接入设备，跨设备链路聚合组网中还包括第二网络接入设备，具体流程如图1所示。
步骤101，接收与第一网络接入设备通信连接的上游设备或下游设备发送的报文；
步骤102，将报文中的ICMP应答报文发送至第二网络接入设备，以供第二网络接入设备在识别到ICMP应答报文的目标网络接入设备为第二网络接入设备后，根据ICMP应答报文获取网络诊断结果。
本实施例中，跨设备链路聚合组网中的网络接入设备接收到上游或下游设备发送的报文后，转发报文中的ICMP应答报文，使得跨设备链路聚合组网中的网络接入设备均接收到所述ICMP应答报文。避免由于跨设备链路聚合组网中网络接入设备对报文进行负载分担，导致接收ICMP应答报文的网络接入设备与原发送ICMP测试报文的网络接入设备不一致，进而反馈网络异常这一问题；本实施例中跨设备链路聚合组网中的网络接入设备不被路径影响，均能获取ICMP应答报文，能够提高跨设备链路聚合组网的网络诊断的准确性。
下面对本实施方式的跨设备链路聚合组网的网络诊断方法的实现细节进行具体的说明，以下内容仅为方便理解提供的实现细节，并非实施本方案的必须。
在步骤101中，接收与第一网络接入设备通信连接的上游设备或下游设备发送的报文。
在规划和部署MC-LAG场景基本业务，如MC-LAG配置，IP、VLAN和MAC等配置之后，正式运行的过程中，接收邻居设备发送的报文。邻居设备包括上游设备和下游设备，上游设备例如网管设备等，下游设备例如服务器等。MC-LAG场景中的第一网络接入设备会接收邻居设备发送的多种报文，在一个例子中，在接收到的报文里，识别出需要执行操作的ICMP应答报文，便于后续对其进行针对性处理。
在一个例子中，网络接入设备例如为交换机。
在一个例子中，根据前置参数匹配所述应答报文，获取所述应答报文对应的访问控制列表(Access Control Lists，ACL)条目；所述ACL条目用于识别ICMP应答报文的网际协议版本，网际协议版本包括ipv4和ipv6。其中，识别出的网际协议版本应用于ICMP应答报文的传输过程中。
具体地，前置参数为预设值，需要使用ping诊断网络时，首先根据前置参数匹配应答报文，得到两个ACL条目，用于管理第一网络接入设备中的数据收 发。其中一个ACL条目用于匹配ipv4的ICMP应答报文，另一个ACL条目用于匹配ipv6的ICMP应答报文。在一个实际执行过程中，例如，使能前置参数，使得第一网络接入设备生成两个ACL条目，或从前置参数中获取两个ACL条目。
在步骤102中，将ICMP应答报文发送至第二网络接入设备，以供第二网络接入设备在识别到ICMP应答报文的目标网络接入设备为第二网络接入设备后，根据ICMP应答报文获取网络诊断结果。
在一个例子中，若已识别到ICMP应答报文的网际协议版本，则根据网际协议版本对应的模式，将ICMP应答报文发送至第二网络接入设备。
在一个例子中，识别ICMP应答报文的来源，根据所述识别到的来源，并根据预置的来源与报文发送方式的对应关系，将所述报文中的ICMP应答报文发送至所述第二网络接入设备。例如：根据ICMP应答报文的来源和控制参数将ICMP应答报文发送至第二网络接入设备；控制参数中存储各来源对应的报文发送方式；其中，若ICMP应答报文来自上游设备，则对ICMP应答报文执行重定向处理，将重定向处理后的ICMP应答报文发送至第二网络接入设备；若ICMP应答报文来自下游设备，则对ICMP应答报文执行流镜像处理，将流镜像处理后的ICMP应答报文发送至第二网络接入设备。另外，还能够结合识别出的ICMP应答报文的网际协议版本进行发送。
具体地，预置的来源与报文发送方式的对应关系决定了对收到的ipv4/ipv6的ICMP应答报文的处理动作，例如包括两个处理动作：mc-lag ping流镜像和mc-lag ping重定向，该控制参数可以使能(运用)在VLAN、物理口或聚合口下，将收到的ipv4/ipv6icmp应答报文流镜像或重定向一份到peerlink口，转发给第二网络接入设备进行处理。
在一个例子中，来源与报文发送方式的对应关系也可以从ACL条目中获取，即通过ACL识别匹配ICMP应答报文，比如一个ACL条目rule 1 permit icmp any any echo-reply(ipv4与ipv6是两个不同的规则)，指应答echo-reply的icmp报文。根据前置参数获取了该ACL条目，根据控制参数把该ACL条目应用在了第一端口上，在第一端口收到的符合该ACL条目的报文时会执行预定好的动作，如第一端口收到icmp应答报文时执行流镜像动作等。
在一个例子中，若ICMP应答报文来自上游设备，则对ICMP应答报文执行重定向处理，将重定向后的ICMP应答报文发送至所述第二网络接入设备。由于第一网络接入设备和第二网络接入设备对于上游设备来说为两个地址不同的设备，所以在将ICMP应答报文传送至第二网络接入设备时，会需要改变ICMP应答报文的目的地址，即对ICMP应答报文执行重定向功能。
具体地，在第一网络接入设备ping上游设备时，可以在第一网络接入设备面向上游的VLAN或端口下执行重定向功能，下发如下规则：当第一网络接入设备收到ipv4/ipv6 ICMP应答报文时，将重定向该ICMP应答报文的下一跳ip地址至第二网络接入设备，例如，将该ICMP应答报文指向到peerlink口，并通过所述peerlink口转发给第二网络接入设备。可选的，在对ICMP应答报文进行重定向处理之前，第一网络接入设备按常规流程将所述ICMP应答报文上送第一网络接入设备的cpu，若第一网络接入设备识别到ICMP应答报文的目标网络接入设备为第一网络接入设备，则第一网络接入设备根据ICMP应答报文获取网络诊断结果；另外，在识别到第一网络接入设备为目标网络接入设备后，可以不影响第一网络接入设备向第二网络接入设备发送ICMP应答报文的行为，即，可以实行发送，降低预置的执行规则的复杂度，也可以不实行发送，减少系统中的冗余数据。例如，网络接入设备A和网络接入设备B位于MC-LAG系统中，在网络接入设备A上ping上游设备(例如网络侧远端服务器)，上游设备收到ping包(检测消息)后回复的ICMP应答报文根据路由负载分担可能转发给了网络接入设备B，当网络接入设备B收到ICMP应答报文时，本地上送cpu处理，同时将该ICMP应答报文根据指定的下一跳ip地址重定向由peerlink口转发给网络接入设备A，由于重定向的报文根据下一跳ip查ARP表后修改的目的mac是网络接入设备A的机架mac，因此网络接入设备A收到重定向过来的ICMP应答报文会上送cpu处理，并反馈ping是否成功。
在一个例子中，若ICMP应答报文来自下游服务器，则对ICMP应答报文执行流镜像处理，将流镜像后的ICMP应答报文发送至第二网络接入设备。由于第一网络接入设备和第二网络接入设备对于下游设备，例如下游服务器来说为两个地址相同的设备，所以在将ICMP应答报文传送至第二网络接入设备时，不需要改变ICMP应答报文的相关数据，即对ICMP应答报文执行流镜像处理 即可。
具体地，在第一网络接入设备ping下游设备，例如下游服务器时，可以在第一网络接入设备面向下游的VLAN或端口下执行流镜像功能，下发如下规则：当第一网络接入设备收到ipv4/ipv6 ICMP应答报文时，将该ICMP应答报文镜像一份到peerlink口，通过所述peerlink口转发到第二网络接入设备。可选的，在对ICMP应答报文进行流镜像处理之前，第一网络接入设备按常规流程将所述ICMP应答报文上送第一网络接入设备的cpu，若第一网络接入设备识别到ICMP应答报文的目标网络接入设备为第一网络接入设备，则第一网络接入设备根据ICMP应答报文获取网络诊断结果；另外，在识别到第一网络接入设备为目标网络接入设备后，可以不影响第一网络接入设备向第二网络接入设备发送报文的行为，即，可以实行发送，降低预置的执行规则的复杂度，也可以不实行发送，减少系统中的冗余数据。例如，网络接入设备A和网络接入设备B与与下游服务器位于MC-LAG系统中，在网络接入设备A上ping下游服务器，服务器收到ping包后回复的ICMP应答报文可能转发给网络接入设备B，当网络接入设备B收到ICMP应答报文时，本地上送cpu处理，同时将该报文镜像一份到peerlink口，通过peerlink口转发给网络接入设备A，由于网络接入设备A和网络接入设备B对下游服务器用了相同的网关IP和MAC地址，所以网络接入设备A与网络接入设备B对于下游服务器来说网关IP和MAC地址是相同的，网络接入设备A收到镜像过来的ICMP应答报文会上送cpu处理，并反馈ping是否成功。
在另一个例子中，将ICMP应答报文发送至第二网络接入设备之后，还包括，删除流镜像或重定向过程中生成的相关规则，删除ACL条目等。即，在对报文完成处理之后，删除冗余数据，用以节约存储空间，提高设备的使用效率。
在一个例子中，以具体网络接入设备之间的交互过程具体说明本实施方式的跨设备链路聚合组网的网络诊断方法。如图2所示，当网络接入设备A与网络接入设备B位于同一MC-LAG系统，对应的下游设备为server1，网络接入设备C和网络接入设备D位于同一MC-LAG系统，对应的下游设备为server2时，本方案的实施过程例如：
部署MC-LAG业务基础配置，如MC-LAG端口配置，MC-LAG端口VLAN 配置，MC-LAG端口三层IP和anycast mac配置，MC-LAG上联三层接口和路由的配置等。根据前置参数，获取两个ACL规则，用来匹配ipv4/ipv6 ICMP应答报文；具体例如，使能前置参数，使得网络接入设备A本地对网络接入设备A下发两个ACL规则。
若接收到的ICMP应答报文来自server1时，网络接入设备A的下游侧(MC-LAG接入侧)VLAN或端口使能mc-lag ping流镜像功能，下发规则：将MC-LAG接入侧VLAN或端口收到ipv4/ipv6 ICMP应答报文镜像一份到peerlink口。在网络接入设备A上ping接入侧近端服务器server1，如果server1回复的ICMP应答报文转发给了网络接入设备B，网络接入设备B收到ICMP应答报文后，本地上送cpu处理，并将该报文镜像一份到peerlink口转发给网络接入设备A，网络接入设备A收到镜像过来的icmp应答报文上送cpu处理，能够使得网络接入设备A的ping操作返回成功。并在返回成功后，删除mc-lag ping控制参数，也删除mc-lag ping流镜像功能的相关规则。
若收到的ICMP应答报文来自server2时，网络接入设备A的上游侧(MC-LAG网络侧)VLAN或端口使能mc-lag重定向功能，下发规则，将MC-LAG网络侧VLAN或端口收到的ipv4/ipv6 ICMP应答报文根据指定的下一跳ip重定向到peerlink口；在网络接入设备A上ping网络侧远端服务器server2，如果server2回复的ICMP应答报文根据路由转给了网络接入设备B，网络接入设备B收到ICMP应答报文后，本地上送cpu处理，并将该报文根据指定的下一跳ip地址重定向从peerlink口转发给网络接入设备A，网络接入设备A收到重定向过来的ICMP应答报文上送cpu处理，网络接入设备A的ping操作返回成功。在返回成功后，删除mc-lag ping控制参数，并删除mc-lag ping重定向功能的相关规则。
最终，删除前置参数、控制参数等；也可称之为去使能MC-LAG前置参数、控制参数等，并删除相关的ACL条目。
在另一个例子中，以数值举例的方式，对本实施方式中的实施过程进行详细叙述。可以知道的是，相关内容仅为方便理解提供的实现细节，并非实施本方案的必须。
如图3所示，网络接入设备A和网络接入设备B组成一个MC-LAG系统 与服务器server1对接sg11端口，并将网络接入设备A和网络接入设备B添加到vlan 10中(图中未示出)，上联通过传统三层接口对接汇聚设备E。网络接入设备C和网络接入设备D组成一个MC-LAG系统与服务器server2对接sg12端口，并将网络接入设备C和网络接入设备D添加到vlan 20中(图中未示出)，上联通过传统三层接口对接汇聚设备E。Server1配置ip地址10.1.1.2，网络接入设备A和网络接入设备B配置网关ip地址10.1.1.1和anycast mac 000.1111.1111。Server2配置ip地址20.1.1.2，网络接入设备C和网络接入设备D配置网关ip地址20.1.1.1和anycast mac 0000.2222.2222。网络接入设备A的peerlink三层ip地址配置为30.1.1.1，网络接入设备B的peerlink三层ip地址配置为30.1.1.2，网络接入设备C的peerlink三层ip地址配置为30.2.1.1，网络接入设备D的peerlink三层ip地址配置为30.2.1.2。网络接入设备A和网络接入设备B之间的peerlink通道归属于vlan254，ip地址配置为30.1.1.0/24；网络接入设备C和网络接入设备D之间的peerlink通道归属于vlan255，ip地址配置为30.2.1.0/24。
在网络接入设备B上做如下配置：根据前置参数，获取ACL条目，也就是使能mc-lag ping前置参数配置，触发网络接入设备B内部下发匹配ipv4/ipv6 ICMP应答报文的ACL条目；在vlan10或sg11端口下配置mc-lag ping流镜像功能；在网络接入设备B的上行端口(port4)，即网络接入设备B上与所述设备E进行信号传输的端口，配置mc-lag ping重定向功能，指定下一跳为网络接入设备A的peerlink三层接口地址30.1.1.1。
在网络接入设备A上ping服务器server1的10.1.1.2地址，如果server1回复ICMP应答报文给网络接入设备A，网络接入设备A收到ICMP应答报文上送cpu，也就是网络接入设备A的ping返回成功。如果server1回复ICMP应答报文给网络接入设备B，网络接入设备B收到ICMP应答报文，本地上送cpu处理，并将该报文镜像一份到peerlink口，网络接入设备A收到镜像过来的ICMP应答报文上送cpu，也能够使网络接入设备A的ping返回成功。
在网络接入设备A上ping远端服务器server2的20.1.1.2地址，选的ping包源地址为10.1.1.1，如果server2回复ICMP应答报文转发给了网络接入设备A，网络接入设备A收到ICMP应答报文上送cpu，ping返回成功，如果server2 回复ICMP应答报文转发给了网络接入设备B(网络接入设备B的port4为报文入口)，网络接入设备B收到ICMP应答报文，本地上送cpu处理，并将修改报文的目的mac为arp 30.1.1.1对应的mac地址，把报文重定向由peerlink口发往网络接入设备A，网络接入设备A收到重定向过来的ICMP应答报文上送cpu，网络接入设备A的ping返回成功。
Ipv6网络的操作同ipv4，这里不再列举。通过以上的操作，MC-LAG系统中设备的ping操作能准确的返回诊断结果。
在本实施方式中，跨设备链路聚合组网中的网络接入设备接收到上游或下游设备发送的报文后，转发报文中的ICMP应答报文，使得跨设备链路聚合组网中的网络接入设备均接收到所述ICMP应答报文。避免由于跨设备链路聚合组网中网络接入设备对报文进行负载分担，导致接收ICMP应答报文的网络接入设备与原发送ICMP测试报文的网络接入设备不一致，进而反馈网络异常这一问题；跨设备链路聚合组网中的网络接入设备不被路径影响，均能获取ICMP应答报文，提高跨设备链路聚合组网的网络诊断的准确性。
本申请的一个实施方式涉及一种跨设备链路聚合组网的网络诊断装置。如图4所示，网络诊断装置应用于跨设备链路聚合组网中的第一网络接入设备，跨设备链路聚合组网中还包括第二网络接入设备，网络诊断装置包括：
接收模块201，用于接收与第一网络接入设备通信连接的上游设备或下游设备发送的报文；
转发模块202，用于将报文中的ICMP应答报文发送至第二网络接入设备，以供第二网络接入设备在识别到ICMP应答报文的目标网络接入设备为第二网络接入设备后，根据ICMP应答报文获取网络诊断结果。
在接收模块201中，还包括根据前置参数匹配所述应答报文，获取所述应答报文对应的访问控制列表ACL条目；所述ACL条目用于识别所述ICMP应答报文的网际协议版本。
在转发模块202中，所述将所述ICMP应答报文发送至所述第二网络接入设备，包括：将所述ICMP应答报文发送至所述第二网络接入设备，例如：根据识别到的所述网际协议版本，将所述ICMP应答报文发送至所述第二网络接入设备。
在一个例子中，所述将所述ICMP应答报文发送至所述第二网络接入设备，包括：识别所述ICMP应答报文的来源；根据所述识别到的来源，并根据预置的来源与报文发送方式的对应关系，将所述报文中的ICMP应答报文发送至所述第二网络接入设备。
在一个例子中，网络接入设备例如为交换机。
在一个例子中，所述根据所述识别到的来源，并根据预置的来源与报文发送方式的对应关系，将所述报文中的ICMP应答报文发送至所述第二网络接入设备，包括：若所述ICMP应答报文来自所述上游设备，则对所述ICMP应答报文执行重定向处理，将所述重定向后的ICMP应答报文发送至所述第二网络接入设备；若所述ICMP应答报文来自所述下游服务器，则对所述ICMP应答报文执行流镜像处理，将所述流镜像后的ICMP应答报文发送至所述第二网络接入设备。
在一个例子中，所述对所述ICMP应答报文执行重定向处理，将所述ICMP应答报文发送至所述第二网络接入设备，包括：将所述ICMP应答报文的下一跳地址变更为所述第二网络接入设备；将所述变更后的ICMP应答报文通过peerlink口发送至所述第二网络接入设备。
在一个例子中，所述对所述ICMP应答报文执行流镜像处理，将所述ICMP应答报文发送至所述第二网络接入设备，包括：将所述ICMP应答报文镜像复制；将所述镜像复制结果通过peerlink口发送至所述第二网络接入设备。
在处理模块中(图中未示出)，若识别到所述ICMP应答报文的目标网络接入设备为所述第一网络接入设备，则根据所述ICMP应答报文获取网络诊断结果。
在本实施方式中，跨设备链路聚合组网中的网络接入设备接收到上游或下游设备发送的报文后，转发所述报文中的ICMP应答报文，使得跨设备链路聚合组网中的网络接入设备均接收到所述ICMP应答报文。避免由于跨设备链路聚合组网中网络接入设备对报文进行负载分担，导致接收ICMP应答报文的网络接入设备与原发送ICMP测试报文的网络接入设备不一致，进而反馈网络异常这一问题；跨设备链路聚合组网中的网络接入设备不被路径影响，均能获取ICMP应答报文，提高跨设备链路聚合组网的网络诊断的准确性。
不难发现，本实施方式为与上述实施方式相对应的系统实施例，本实施方式可与上述实施方式互相配合实施。第一实施方式中提到的相关技术细节在本实施方式中依然有效，为了减少重复，这里不再赘述。相应地，本实施方式中提到的相关技术细节也可应用在上述实施方式中。
值得一提的是，本实施方式中所涉及到的各模块均为逻辑模块，在实际应用中，一个逻辑单元可以是一个物理单元，也可以是一个物理单元的一部分，还可以以多个物理单元的组合实现。此外，为了突出本申请的创新部分，本实施方式中并没有将与解决本申请所提出的技术问题关系不太密切的单元引入，但这并不表明本实施方式中不存在其它的单元。
上面各种方法的步骤划分，只是为了描述清楚，实现时可以合并为一个步骤或者对某些步骤进行拆分，分解为多个步骤，只要包括相同的逻辑关系，都在本专利的保护范围内；对算法中或者流程中添加无关紧要的修改或者引入无关紧要的设计，但不改变其算法和流程的核心设计都在该专利的保护范围内。
本申请一个实施方式涉及一种网络接入设备，如图5所示，包括至少一个处理器301；以及，
与所述至少一个处理器通信连接的存储器302；其中，
所述存储器存储有可被所述至少一个处理器执行的指令，所述指令被所述至少一个处理器执行，以使所述至少一个处理器能够执行上述的跨设备链路聚合组网的网络诊断方法。
其中，存储器和处理器采用总线方式连接，总线可以包括任意数量的互联的总线和桥，总线将一个或多个处理器和存储器的各种电路连接在一起。总线还可以将诸如外围设备、稳压器和功率管理电路等之类的各种其他电路连接在一起，这些都是本领域所公知的，因此，本文不再对其进行进一步描述。总线接口在总线和收发机之间提供接口。收发机可以是一个元件，也可以是多个元件，比如多个接收器和发送器，提供用于在传输介质上与各种其他装置通信的单元。经处理器处理的数据通过天线在无线介质上进行传输，进一步，天线还接收数据并将数据传送给处理器。
处理器负责管理总线和通常的处理，还可以提供各种功能，包括定时，外围接口，电压调节、电源管理以及其他控制功能。而存储器可以被用于存储处 理器在执行操作时所使用的数据。
本申请一个实施方式涉及一种计算机可读存储介质，存储有计算机程序。计算机程序被处理器执行时实现上述方法实施例。
即，本领域技术人员可以理解，实现上述实施例方法中的全部或部分步骤是可以通过程序来指令相关的硬件来完成，该程序存储在一个存储介质中，包括若干指令用以使得一个设备(可以是单片机，芯片等)或处理器(processor)执行本申请各个实施例所述方法的全部或部分步骤。而前述的存储介质包括：U盘、移动硬盘、只读存储器(ROM，Read-Only Memory)、随机存取存储器(RAM，Random Access Memory)、磁碟或者光盘等各种可以存储程序代码的介质。
本领域的普通技术人员可以理解，上述各实施方式是实现本申请的具体实施例，而在实际应用中，可以在形式上和细节上对其作各种改变，而不偏离本申请的精神和范围。

Claims (10)

  1. 一种跨设备链路聚合组网的网络诊断方法，应用于跨设备链路聚合组网中的第一网络接入设备，所述跨设备链路聚合组网中还包括第二网络接入设备，所述方法包括：
    接收与所述第一网络接入设备通信连接的上游设备或下游设备发送的报文；
    将所述报文中的ICMP应答报文发送至所述第二网络接入设备，以供所述第二网络接入设备在识别到所述ICMP应答报文的目标网络接入设备为所述第二网络接入设备后，根据所述ICMP应答报文获取网络诊断结果。
  2. 根据权利要求1中所述的跨设备链路聚合组网的网络诊断方法，其中，所述将所述报文中的ICMP应答报文发送至所述第二网络接入设备，包括：
    识别所述ICMP应答报文的来源；
    根据所述识别到的来源，并根据预置的来源与报文发送方式的对应关系，将所述报文中的ICMP应答报文发送至所述第二网络接入设备。
  3. 根据权利要求2中所述的跨设备链路聚合组网的网络诊断方法，其中，所述根据所述识别到的来源，并根据预置的来源与报文发送方式的对应关系，将所述报文中的ICMP应答报文发送至所述第二网络接入设备，包括：
    若所述ICMP应答报文来自所述上游设备，则对所述ICMP应答报文执行重定向处理，将所述重定向处理后的ICMP应答报文发送至所述第二网络接入设备；
    若所述ICMP应答报文来自所述下游设备，则对所述ICMP应答报文执行流镜像处理，将所述流镜像处理后的ICMP应答报文发送至所述第二网络接入设备。
  4. 根据权利要求3所述的跨设备链路聚合组网的网络诊断方法，其中，所述对所述ICMP应答报文执行重定向处理，将所述ICMP应答报文发送至所述第二网络接入设备，包括：
    将所述ICMP应答报文的下一跳地址变更为所述第二网络接入设备；
    将所述变更后的ICMP应答报文通过peerlink口发送至所述第二网络接入设备。
  5. 根据权利要求3所述的跨设备链路聚合组网的网络诊断方法，其中，所述对所述ICMP应答报文执行流镜像处理，将所述ICMP应答报文发送至所述第二网络接入设备，包括：
    将所述ICMP应答报文镜像复制；
    将所述镜像复制结果通过peerlink口发送至所述第二网络接入设备。
  6. 根据权利要求1至5中任一项所述的跨设备链路聚合组网的网络诊断方法，其中，所述将所述报文中的ICMP应答报文发送至所述第二网络接入设备之前，还包括：
    根据前置参数匹配所述ICMP应答报文，获取所述ICMP应答报文对应的访问控制列表ACL条目；所述ACL条目用于识别所述ICMP应答报文的网际协议版本；
    所述将所述ICMP应答报文发送至所述第二网络接入设备，包括：
    根据识别到的所述网际协议版本，将所述ICMP应答报文发送至所述第二网络接入设备。
  7. 根据权利要求1至6中任一项所述的跨设备链路聚合组网的网络诊断方法，其中，在所述接收与所述第一网络接入设备通信连接的上游设备或下游设备发送的报文后，还包括：
    若识别到所述ICMP应答报文的目标网络接入设备为所述第一网络接入设备，则根据所述ICMP应答报文获取网络诊断结果。
  8. 一种跨设备链路聚合组网的网络诊断装置，所述网络诊断装置应用于跨设备链路聚合组网中的第一网络接入设备，所述跨设备链路聚合组网中还包括第二网络接入设备，所述网络诊断装置包括：
    接收模块，用于接收与所述第一网络接入设备通信连接的上游设备或下游 设备发送的报文；
    转发模块，用于将所述报文中的ICMP应答报文发送至所述第二网络接入设备，以供所述第二网络接入设备在识别到所述ICMP应答报文的目标网络接入设备为所述第二网络接入设备后，根据所述ICMP应答报文获取网络诊断结果。
  9. 一种网络接入设备，包括：
    至少一个处理器；以及，
    与所述至少一个处理器通信连接的存储器；其中，
    所述存储器存储有可被所述至少一个处理器执行的指令，所述指令被所述至少一个处理器执行，以使所述至少一个处理器能够执行如权利要求1至7中任一所述的跨设备链路聚合组网的网络诊断方法。
  10. 一种计算机可读存储介质，存储有计算机程序，所述计算机程序被处理器执行时实现权利要求1至7中任一项所述的跨设备链路聚合组网的网络诊断方法。
PCT/CN2022/110393 2021-08-23 2022-08-04 跨设备链路聚合组网的网络诊断方法及网络接入设备 WO2023024867A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN202110968835.6A CN115941560A (zh) 2021-08-23 2021-08-23 跨设备链路聚合组网的网络诊断方法及网络接入设备
CN202110968835.6 2021-08-23

Publications (1)

Publication Number Publication Date
WO2023024867A1 true WO2023024867A1 (zh) 2023-03-02

Family

ID=85321505

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2022/110393 WO2023024867A1 (zh) 2021-08-23 2022-08-04 跨设备链路聚合组网的网络诊断方法及网络接入设备

Country Status (2)

Country Link
CN (1) CN115941560A (zh)
WO (1) WO2023024867A1 (zh)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105306284A (zh) * 2014-05-27 2016-02-03 中兴通讯股份有限公司 检测虚拟专用网络的用户网络侧接口连通性的方法及装置
WO2017000790A1 (zh) * 2015-06-29 2017-01-05 中兴通讯股份有限公司 网关设备响应网络连通性方法和装置
CN109474530A (zh) * 2018-11-13 2019-03-15 新华三技术有限公司 一种设备探测方法及装置
CN112600725A (zh) * 2020-11-20 2021-04-02 四川迅游网络科技股份有限公司 一种icmp报文加速方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105306284A (zh) * 2014-05-27 2016-02-03 中兴通讯股份有限公司 检测虚拟专用网络的用户网络侧接口连通性的方法及装置
WO2017000790A1 (zh) * 2015-06-29 2017-01-05 中兴通讯股份有限公司 网关设备响应网络连通性方法和装置
CN109474530A (zh) * 2018-11-13 2019-03-15 新华三技术有限公司 一种设备探测方法及装置
CN112600725A (zh) * 2020-11-20 2021-04-02 四川迅游网络科技股份有限公司 一种icmp报文加速方法

Also Published As

Publication number Publication date
CN115941560A (zh) 2023-04-07

Similar Documents

Publication Publication Date Title
EP2245792B1 (en) System, method and program for determining failed routers in a network
EP3694145B1 (en) Method and device for sending messages
CN110798403B (zh) 通信方法、通信设备和通信系统
CN106559246B (zh) 集群的实现方法和服务器
US20120144483A1 (en) Method and apparatus for preventing network attack
JP7124206B2 (ja) パケット処理方法およびゲートウェイ・デバイス
WO2022083563A1 (zh) 链路检测方法、链路检测装置、终端设备和存储介质
US11489752B2 (en) Forwarding entry monitoring method and apparatus
US11522792B2 (en) Method for discovering forwarding path and related device thereof
US10938721B2 (en) Hash collision mitigation system
CN113839862B (zh) Mclag邻居之间同步arp信息的方法、系统、终端及存储介质
US11582140B2 (en) OAM-based suboptimal ECMP path detection in software-defined fabric
CN113381929B (zh) 一种路由处理方法、网关设备及计算机存储介质
WO2023024867A1 (zh) 跨设备链路聚合组网的网络诊断方法及网络接入设备
CN116545665A (zh) 一种安全引流方法、系统、设备及介质
Oliveira et al. L3-arpsec–a secure openflow network controller module to control and protect the address resolution protocol
WO2023030141A1 (zh) 探测公网转发设备的方法、公网转发设备和存储介质
CN116996368B (zh) 一种云内外通信的方法、系统、设备及存储介质
US11838178B2 (en) System and method for managing a network device
WO2023029750A1 (zh) Mac学习方法、装置、电子设备及存储介质
CN111385120B (zh) 一种确定转发故障位置的方法和设备
US20240039829A1 (en) Route refresh method, apparatus, and system

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 22860213

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE