Route introduction method, device and system

Abstract

The invention provides a route introduction method, a device and a system, and belongs to the technical field of networks. After first network equipment introduces the routing information of the first VPN instance in the second network equipment from the first VPN instance to a second VPN instance in the first network equipment, the routing information of the first VPN instance is introduced from the second VPN instance to a third VPN instance in the first network equipment. The routing information of the first VPN instance is not introduced into the second VPN instance and the third VPN instance from the first VPN instance, so that the mutual access of a large number of VPN instances between the first network equipment and the second network equipment can be realized without configuring a large number of paired ERT and IRT in the first network equipment and the second network equipment, and the service logic and configuration can be simplified; according to the invention, service security can be guaranteed, loops and fault diffusion are avoided, and normal communication of virtual machines mounted under different network equipment can be realized.

Description

technical field [0001] The present application relates to the field of network technologies, and in particular to a route importing method, device and system. Background technique [0002] At least one virtual private network (virtual private network, VPN) instance is configured in a provider edge (provider edge, PE) device in an Ethernet virtual private network (Ethernet virtual private network, EVPN) network, and each VPN instance is connected to the PE At least one virtual machine (virtual machine, VM) connected to the device corresponds, and each VPN instance is used to forward packets of the VM, so as to realize communication between different VMs. [0003] When VMs under two different VPN instances need to communicate, the route of one VPN instance can be imported into the other VPN instance through route crossing, so that the routes of the two VPN instances can communicate with each other. Among them, the VPN instance is configured with an inbound route target (impor...

AI Technical Summary

Problems solved by technology

[0004] However, in the local crossover scenario, the existing mechanism cannot realize the routing interworking between the local VPN instance and the remote VPN instance (referring to the VPN instance in the remote PE), which affects the VMs mounted on different PE devices. normal communication, resulting in limited application scenarios for routing imports

In the remote crossover scenario, if you want to realize the mutual access of a large number of VPN instances between multiple PE devices, you need to configure a large number of paired ERTs and IRTs on the multiple PE devices, which makes the business logic and configuration very complicated, and it is easy to damage the VPN. Effective isolation between instances cannot guarantee business security, and increases the possibility of loops and fault diffusion

Images