Ethernet Virtual Private Network Service Provisioning Methods and Equipment, Metropolitan Area Networks

Abstract

This disclosure relates to a method and device for providing Ethernet Virtual Private Network (VPN) services, and a metropolitan area network (MAN). The method includes forwarding Media Access Control (MAC) addresses based on a bridging domain MAC routing table to provide VPN services. This disclosure defines a novel MAC forwarding mechanism that eliminates the need for VLAN replanning and configuration changes to the relevant OLT (Optical Line Terminal).

Description

Technical Field

[0001] This disclosure relates to the field of IP (Internet Protocol) data communication, and in particular to a method and device for providing EVPN (Ethernet Virtual Private Network) services and a metropolitan area network. Background Technology

[0002] Traditional metropolitan area network (MAN) architecture can no longer meet the needs of emerging telecommunications services. China Telecom is gradually promoting the transformation of its MAN architecture and conducting pilot projects for new MANs nationwide. With the development of virtualization technology, the original MAN MSE (BRAS) is being gradually transformed into a centralized pooled deployment. Therefore, based on the new MAN architecture, the high-mounted BRAS (Broadband Remote Access Server) pool will handle millions of user MAC (Media Access Control Addresses) for a single POD for home broadband services, bringing inoperable difficulties to the cutover and maintenance of related technical services. Summary of the Invention

[0003] The inventors discovered through research that the construction of new metropolitan area networks (MANs) using related technologies adopts a completely new network architecture. With the pilot deployment of the new MANs, the new network architecture uses BRAS high-mounted and EVPN-VPLS (Virtual Private LAN Service) pooling. The pain points are: after BRAS pooling, MSE (Multi-Service Edge) devices are centrally deployed. Under one BRAS pool, millions of user addresses need to be learned, and the MAC performance requirements of B-leaf (BORDER leaf) devices are greatly increased, exceeding the specifications of B-LEAF devices.

[0004] The related technology VRR (Virtual Route Reflector) is responsible for MAC reflection of millions or tens of millions of records. Route reflection requires the configuration of complex MAC filtering rules, otherwise the A-Leaf (Access Leaf) will also face MAC performance pressure.

[0005] The related technologies involve multiple OLTs (Optical Line Terminals) and VLANs (Virtual Local Area Networks) in the network, which are relatively complex and overlapping. Directly cutting over some services cannot be established normally. At the same time, the requirements for MAC entries in the network devices increase dramatically. MAC storms can easily cause loops and oscillations, which will paralyze the entire network. In addition, the network configuration is complex and difficult to operate in the current network.

[0006] In view of at least one of the above technical problems, this disclosure provides an Ethernet virtual private network service provisioning method and device, a metropolitan area network, and defines a new MAC forwarding mechanism that does not require VLAN replanning and configuration changes to the related OLT technology.

[0007] According to one aspect of this disclosure, a method for providing Ethernet virtual private network services is provided, comprising:

[0008] Media access control address forwarding is performed based on the bridging domain media access control address routing table to provide Ethernet virtual private network services.

[0009] In some embodiments of this disclosure, the media access control address forwarding based on the bridging domain media access control address routing table includes:

[0010] Create a new bridging domain media access control address routing forwarding table;

[0011] The access leaf node device will bind the storage of the local access user media access control address table to the newly created bridge domain mapping;

[0012] Access leaf node devices send default media access control address routes to serving leaf node devices or route reflectors.

[0013] In some embodiments of this disclosure, the sending of the default media access control address route from the access leaf node device to the serving leaf node device or the route reflector includes:

[0014] A pair of access leaf node devices advertises a default media access control address route to the upper-layer service leaf node device or route reflector through each Ethernet virtual private network instance in the bridging domain.

[0015] In some embodiments of this disclosure, the method for providing Ethernet virtual private network services further includes:

[0016] The access leaf node device receives the media access control address of the user plane-side gateway sent by the serving leaf node device;

[0017] The access leaf node device receives the media access control address of the user plane gateway and the media access control address of the user accessing the local optical line terminal.

[0018] In some embodiments of this disclosure, the method for providing Ethernet virtual private network services further includes:

[0019] Different access leaf node device pairs are isolated through different Ethernet virtual private networks to ensure that the service leaf node device only looks for unknown media access control address routes within the scope of the corresponding Ethernet virtual private network instance.

[0020] In some embodiments of this disclosure, the method for providing Ethernet virtual private network services further includes:

[0021] The control message broadcast by the optical line terminal to access the user-side equipment is forwarded through the serving leaf node equipment, wherein the control message broadcast is an uplink broadcast request;

[0022] The optical line terminal accesses the user-side equipment's traffic via uplink unicast and finds the gateway media access control address of the user-side equipment for forwarding.

[0023] The user-side device responds to the broadcast control message via downlink unicast. The unicast packet responded by the user-side device hits the unknown media access control address at the serving leaf node device and is forwarded to the access leaf node device. After reaching the access leaf node device, the user-side gateway media access control address is looked up and forwarded to the optical line terminal.

[0024] In some embodiments of this disclosure, the newly created bridging domain media access control address routing forwarding table includes:

[0025] The access leaf node device has a detailed user-side gateway media access control address forwarding table and a bridging domain media access control address routing forwarding table. The bridging domain media access control address routing forwarding table is used to map and forward the detailed media access control address of the access leaf node device to the created bridging domain instance after binding it.

[0026] Define the bridging domain functionality;

[0027] Define a border gateway protocol synchronization protection mechanism.

[0028] In some embodiments of this disclosure, defining the bridging domain function includes:

[0029] Define a bridging domain Ethernet segment identifier, used to establish and publish the second type of default route for Ethernet virtual private networks between access leaf node devices and service leaf node devices, enable dual-active mode, and enable one-to-one, many-to-one, or bridging domain mode on access leaf node devices. Access leaf node devices only need to receive the media access control address of the user plane gateway.

[0030] In some embodiments of this disclosure, the defined border gateway protocol synchronization protection mechanism includes:

[0031] Establish a border gateway protocol session between a pair of access leaf node devices to synchronize information in the user media access control address routing table on the access leaf node device side, ensuring that the optical line terminal has dual uplink access to the leaf node device and interrupting one access controller link.

[0032] According to another aspect of this disclosure, an access leaf node device is provided, comprising:

[0033] The network service provision module is used to provide Ethernet virtual private network services using segment routing based on the IPv6 forwarding plane.

[0034] The address forwarding module is used to forward media access control addresses using Ethernet virtual private networks with segment routing based on the IPv6 forwarding plane.

[0035] In some embodiments of this disclosure, the access leaf node device is used to perform operations implementing the Ethernet Virtual Private Network service provision method as described in any of the above embodiments.

[0036] According to another aspect of this disclosure, an access leaf node device is provided, comprising:

[0037] Memory, used to store instructions;

[0038] A processor is configured to execute the instructions, causing the access leaf node device to perform operations implementing the Ethernet Virtual Private Network service provision method as described in any of the above embodiments.

[0039] According to another aspect of this disclosure, a metropolitan area network is provided, including an access leaf node device as described in any of the above embodiments.

[0040] According to another aspect of this disclosure, a non-transitory computer-readable storage medium is provided, wherein the non-transitory computer-readable storage medium stores computer instructions that, when executed by a processor, implement the Ethernet virtual private network service provision method as described in any of the above embodiments.

[0041] This disclosure defines a new MAC forwarding mechanism that does not require VLAN replanning and configuration changes to the relevant OLT technology. Attached Figure Description

[0042] To more clearly illustrate the technical solutions in the embodiments of this disclosure or the prior art, the drawings used in the description of the embodiments or the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this disclosure. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0043] Figure 1 This is a schematic diagram of some embodiments of metropolitan area networks related to the technology.

[0044] Figure 2 Schematic diagrams of some embodiments of the method for providing Ethernet virtual private network services disclosed herein.

[0045] Figure 3 This is a schematic diagram of some embodiments of the metropolitan area network disclosed herein.

[0046] Figure 4 This diagram illustrates the binding of the A-Leaf local detailed MAC forwarding table with the EVPN instance and BD in some embodiments of this disclosure.

[0047] Figure 5 This is a schematic diagram of some embodiments of the access leaf node device disclosed herein.

[0048] Figure 6 This is a schematic diagram of the structure of some other embodiments of the access leaf node device disclosed herein. Detailed Implementation

[0049] The technical solutions of the embodiments of this disclosure will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this disclosure, and not all embodiments. The following description of at least one exemplary embodiment is merely illustrative and is in no way intended to limit this disclosure or its application or use. All other embodiments obtained by those skilled in the art based on the embodiments of this disclosure without creative effort are within the scope of protection of this disclosure.

[0050] Unless otherwise specifically stated, the relative arrangement, numerical expressions, and values ​​of the components and steps set forth in these embodiments do not limit the scope of this disclosure.

[0051] At the same time, it should be understood that, for ease of description, the dimensions of the various parts shown in the accompanying drawings are not drawn according to actual scale.

[0052] Techniques, methods, and equipment known to those skilled in the art may not be discussed in detail, but where appropriate, such techniques, methods, and equipment should be considered part of the specification.

[0053] In all examples shown and discussed herein, any specific values ​​should be interpreted as merely exemplary and not as limitations. Therefore, other examples of exemplary embodiments may have different values.

[0054] It should be noted that similar labels and letters in the following figures indicate similar items; therefore, once an item is defined in one figure, it does not need to be discussed further in subsequent figures.

[0055] Figure 1 This is a schematic diagram of some embodiments of related metropolitan area networks. The inventors discovered through research that: In the novel metropolitan area network architecture of related technologies, after BRAS pooling and centralized deployment of MSEs, a single BRAS pool needs to handle the MAC address learning of millions of broadband users. If VPLS is used for the broadband service network, a large Layer 2 switch network is formed. The communication of detailed user MAC addresses between devices in the network drastically increases the requirements for the MAC tables of B-leaf or RR devices. Routing reflection requires the configuration of complex MAC filtering rules, increasing the pressure on the devices.

[0056] If EVPN VPWS is used, VLAN overlap will occur when A-Leaf is connected to the OLT VLAN of the existing network access user. This requires manual replanning of the OLT and user VLANs deployed on the existing network, which is a complicated operation.

[0057] End users frequently switch between online and offline, which increases the MAC reflection burden on the Spine (RR) reflector. The network is often in turmoil, which seriously affects the performance of RR and L3 route convergence, making the entire network uncontrollable.

[0058] The new metropolitan area network will still have a large number of VLAN switches in the future, connecting various government and enterprise customers. Loops will frequently occur, which can easily cause MAC drift and broadcast storms, leading to the paralysis of the entire network.

[0059] In view of at least one of the above technical problems, this disclosure provides a method and device for providing Ethernet virtual private network services and a metropolitan area network. The following describes this disclosure through specific embodiments.

[0060] Figure 2 This diagram illustrates some embodiments of a method for providing Ethernet virtual private network services according to this disclosure. Preferably, this embodiment can be executed by the access leaf node device or the metropolitan area network of this disclosure. The method may include at least one of the following steps, wherein:

[0061] Step 20: Perform media access control address forwarding based on the bridging domain media access control address routing table to provide Ethernet virtual private network services.

[0062] In some embodiments of this disclosure, step 20 may provide Ethernet virtual private network services based on segment routing of the IPv6 forwarding plane.

[0063] In other embodiments of this disclosure, step 20 may provide Ethernet virtual private network services in a manner based on IPv4 or other similar methods.

[0064] In some embodiments of this disclosure, step 20 may include at least one of steps 21-22, wherein:

[0065] Step 21: Provide Ethernet Virtual Private Network services using segment routing based on the IPv6 forwarding plane.

[0066] Step 22: Media access control address forwarding is performed using an Ethernet virtual private network based on segment routing of the IPv6 forwarding plane.

[0067] In some embodiments of this disclosure, step 22 may include: defining an enhanced EVPN Over SRv6 (Segment Routing IPv6) MAC announcement mechanism.

[0068] In other embodiments of this disclosure, step 22 may include: defining an enhanced EVPN Over MPLS (Multi-Protocol Label Switching) MAC announcement mechanism.

[0069] In some embodiments of this disclosure, the underlying tunnel can be a variety of tunneling methods such as SRv6 and MPLS.

[0070] In some embodiments of this disclosure, step 22 may further include: defining a new Leaf device BD domain MAC routing forwarding table for the above-mentioned forwarding mechanism, and implementing the new method only through software development without adding hardware.

[0071] Figure 3 This is a schematic diagram of some embodiments of the metropolitan area network disclosed herein. For example... Figure 3 As shown, the Ethernet Virtual Private Network service provisioning method (e.g.) Figure 2 Step 21) of the embodiment may also include: the new city metropolitan area network adopts an enhanced EVPN technology network deployment scheme, and the underlying tunnel may adopt SRv6.

[0072] like Figure 3As shown, CP is an abbreviation for Control Plane. In the BRAS pool, U1, U2, ... Un are UP (User Plane) devices.

[0073] In some embodiments of this disclosure, the Ethernet Virtual Private Network service provisioning method (e.g.) Figure 2 Step 20 of the embodiment may include: control plane configuration S100 and forwarding plane configuration S200.

[0074] In some embodiments of this disclosure, the control plane configuration S100 may include steps S110-S130, wherein:

[0075] In step S110, the serving leaf node device sends the media access control address of the user plane gateway to the access leaf node device; the access leaf node device receives the media access control address of the user plane gateway and the media access control address of the user accessing the local optical line terminal.

[0076] Step S120: The access leaf node device sends the default media access control address route to the serving leaf node device or the route reflector.

[0077] In some embodiments of this disclosure, step S120 may include: a pair of access leaf node devices advertising a default media access control address route to the upper-layer service leaf node device or route reflector through each Ethernet virtual private network instance of the bridging domain.

[0078] In some embodiments of this disclosure, step S120 may include: adding a new definition for A-Leaf to send a default MAC route (00:00:00:00:00:00) to S-Leaf or RR, no longer sending detailed MAC routes for users, which can reduce the impact of MAC routing on RR and S-Leaf, and enabling the OLT trunk (aggregation port) to dual-actively access A-Leaf.

[0079] Step S130: Different access leaf node device pairs are isolated through different Ethernet virtual private networks to ensure that the service leaf node device only looks up the UMR (Unknown MAC Route) within the corresponding Ethernet virtual private network instance.

[0080] In some embodiments of this disclosure, the forwarding plane configuration S200 may include steps S210-S230, wherein:

[0081] Step S210, Uplink Broadcast Request: The optical line terminal broadcasts a control message to access the user-side equipment, which is forwarded by the serving leaf node equipment, and the UP responds with a unicast message.

[0082] Step S220, Uplink unicast: The optical line terminal accesses the user-side device's traffic through uplink unicast, finds the gateway media access control address of the user-side device, and forwards it.

[0083] Step S230, Downlink Unicast: The user-side device responds with a control message broadcast via downlink unicast. The unicast packet responded by the user-side device hits the unknown media access control address at the serving leaf node device and is forwarded to the access leaf node device. After reaching the access leaf node device, the user-side gateway media access control address is looked up and forwarded to the optical line terminal.

[0084] In some embodiments of this disclosure, the Ethernet Virtual Private Network service provision method may further include: step S30, defining a new Layer 2 MAC forwarding table requirement for the BD (Bridge Domain) in the A-Leaf.

[0085] In some embodiments of this disclosure, step S30, which defines the new BD's Layer 2 MAC forwarding table requirements in A-Leaf, may include steps S310-S330, wherein:

[0086] Step S310: Create a new bridging domain media access control address routing table.

[0087] In some embodiments of this disclosure, step S310 may include: the access leaf node device having a detailed user-side gateway media access control address forwarding table and a bridging domain media access control address routing forwarding table, wherein the bridging domain media access control address routing forwarding table is used to map and forward to the upper-layer service leaf node device or route reflector after the detailed media access control address of the access leaf node device is bound to the created bridging domain instance.

[0088] In some embodiments of this disclosure, step S310 may include: Since A-Leaf announces the default MAC route to S-Leaf or RR according to the control plane forwarding mechanism, in addition to having a detailed user MAC forwarding table on A-Leaf, the forwarding mechanism requires a newly defined EVPN forwarding table for BD domain bridging, which is used to bind the detailed MAC of A-Leaf with the created BD instance and then map and forward it to the upper-layer S-Leaf or RR, thereby reducing the pressure on the upper-layer device and eliminating the need to re-plan the OLT VLAN connected to A-Leaf.

[0089] Figure 4 This diagram illustrates the binding of the A-Leaf local detailed MAC forwarding table with the EVPN instance and BD in some embodiments of this disclosure. Figure 4As shown, different MAC addresses correspond to different VLANs, different ports, and different EVPN instances. The local EVPN instance is bound to the newly created BD EVPN instance. Different access leaf node device pairs send the default MAC route (00:00:00:00) to the S-leaf / RR with the new ESI (Ethernet Segment Identifier).

[0090] Step S320: Define the bridging domain function.

[0091] In some embodiments of this disclosure, step S320 may include: defining a bridging domain Ethernet segment identifier for establishing and publishing a second type of default route for an Ethernet virtual private network between the access leaf node device and the service leaf node device, enabling dual-active mode, and enabling one-to-one or many-to-one or bridging domain mode on the access leaf node device, wherein the access leaf node device only needs to receive the media access control address of the user plane gateway.

[0092] In some embodiments of this disclosure, step S320 may include: adding a new BD domain function: mainly to solve the problem that EVPN Type 2 MAC routing forwarding must carry the ESI field, adding a new BD ESI identifier, used to establish EVPN Type 2 default route publication between A-Leaf and S-Leaf, enabling dual-active mode, and enabling 1:1 or N:1 BD mode on A-Leaf, where A-Leaf only needs to receive the MAC of the UP side gateway.

[0093] In some embodiments of this disclosure, the EVPN MAC / IP routing message (Type 2) may include an 8-byte route distinguisher; a 10-byte Ethernet segment identifier, used on the A-Leaf device to bridge and bind the AC access-side EVPN instance ESI with the published default MAC EVPN instance ESI; a 4-byte Ethernet Tag ID; a 1-byte MAC Address Length, and a 6-byte MAC Address, used by A-Leaf to send to S-Leaf, filling in the default MAC route, and by S-Leaf to A-Leaf, carrying the UP-side gateway MAC route; a 1-byte IP Address Length, and 0, 4, or 16 bytes of IP Address; a 3-byte MPLS Label 1 (Multi-Protocol Label Switching Label 1), and 0 or 3 bytes of Multi-Protocol Label Switching Label 2. Layer 2 SRV6 EVPN can use SRV6 SID (System Identifier) ​​service for forwarding.

[0094] Step S330: Define the BGP (Border Gateway Protocol) synchronization protection mechanism.

[0095] In some embodiments of this disclosure, step S330 may include: establishing a border gateway protocol session between a pair of access leaf node devices for synchronizing information in the user media access control address routing table on the access leaf node device side, so as to ensure that the optical line terminal is connected to the access leaf node device twice, interrupting one AC (Access Controller) link, and performing service protection.

[0096] The inventors discovered through research and development that the relevant technology RFC (Request For Comments, an interface protocol for SIP, a series of memoranda published by the Internet Engineering Task Force) 7543 only defines UMR, which is equivalent to the default route of L3, used to reduce the number of MAC addresses on devices.

[0097] The relevant technologies currently target new metropolitan area networks (MANs) using general VPLS or EVPN E-LAN ​​scenarios, which publish detailed MAC routes throughout the entire Layer 2 domain. In particular, for new MANs with BRAS pooled high-mounted scenarios, the number of user MAC addresses in the metropolitan area increases rapidly, which can easily cause MAC drift and broadcast storms, leading to the paralysis of the entire network and making it impossible to locate the fault.

[0098] Under the relevant technical deployment conditions, if VPLS is adopted, the detailed MAC address will be advertised in the Layer 2 domain of the new metropolitan area network, which cannot meet the requirements of network expansion and reliability, and will greatly increase the pressure on equipment specifications and network configuration maintenance.

[0099] The above embodiments of this disclosure propose that the A-leaf device binds the stored local access user MAC table to the newly created BD domain mapping, defines a new BD domain MAC routing table, and a pair of A-Leafs advertises a default MAC route to the upper-layer S-Leaf or RR through each EVPN instance in the BD domain. This effectively solves the problem of large-capacity MAC advertising at Layer 2 in large networks, simplifies configuration and maintenance, and can further improve network scale development and stability.

[0100] The embodiments of this disclosure propose an enhanced EVPN service provision method, which is a novel protection method for MAC loops and storms in metropolitan area networks. The embodiments of this disclosure define a BD domain MAC forwarding table.

[0101] Figure 5 This is a schematic diagram illustrating some embodiments of the leaf node access device disclosed herein. For example... Figure 5 As shown, the access leaf node device disclosed herein may include an address forwarding module 52, wherein:

[0102] Address forwarding module 52 is used to forward media access control addresses based on the bridging domain media access control address routing table in order to provide Ethernet virtual private network services.

[0103] In some embodiments of this disclosure, the address forwarding module 52 can be used to provide Ethernet virtual private network services using segment routing based on the IPv6 forwarding plane; and to perform media access control address forwarding using Ethernet virtual private network methods based on segment routing based on the IPv6 forwarding plane.

[0104] In some embodiments of this disclosure, the address forwarding module 52 can be used to provide Ethernet virtual private network services in ways such as IPv4.

[0105] In some embodiments of this disclosure, the address forwarding module 52 can be used to create a new bridging domain media access control address routing table; bind the stored local access user media access control address table to the newly created bridging domain mapping in the access leaf node device; and send the default media access control address route to the service leaf node device or route reflector.

[0106] In some embodiments of this disclosure, a pair of access leaf node devices can be used to advertise a default media access control address route to the upper-layer service leaf node device or route reflector through each Ethernet virtual private network instance of the bridging domain.

[0107] In some embodiments of this disclosure, the access leaf node device can also be used to receive the media access control address of the user plane-side gateway sent by the serving leaf node device, as well as the media access control address of the user accessing the local optical line terminal.

[0108] In some embodiments of this disclosure, different access leaf node device pairs are used to isolate the access leaf node devices through different Ethernet virtual private networks to ensure that the service leaf node device only looks up the unknown media access control address route within the scope of the corresponding Ethernet virtual private network instance.

[0109] In some embodiments of this disclosure, the address forwarding module 52 can be used to have a detailed user-side gateway media access control address forwarding table and a bridging domain media access control address routing forwarding table. The bridging domain media access control address routing forwarding table is used to map and forward the detailed media access control addresses of the access leaf node devices to the created bridging domain instance after binding them; define bridging domain functions; and define a border gateway protocol synchronization protection mechanism.

[0110] In some embodiments of this disclosure, the address forwarding module 52, when defining the bridging domain function, can be used to define the bridging domain Ethernet segment identifier, to establish and publish the second type of default route of the Ethernet virtual private network between the access leaf node device and the service leaf node device, to enable the dual-active mode, and to enable one-to-one or many-to-one or bridging domain mode on the access leaf node device, so that the access leaf node device only needs to receive the media access control address of the user plane gateway.

[0111] In some embodiments of this disclosure, the address forwarding module 52, when defining a border gateway protocol synchronization protection mechanism, can be used to establish a border gateway protocol session between a pair of access leaf node devices, for synchronizing information in the user media access control address routing table on the access leaf node device side, ensuring that the optical line terminal has dual uplink access to the leaf node device, and interrupting one access controller link.

[0112] In some embodiments of this disclosure, the access leaf node device is used to perform implementations as described in any of the above embodiments (e.g. Figures 2-4 The operation of the Ethernet Virtual Private Network service provision method described in any embodiment.

[0113] The above embodiments of this disclosure propose that the A-leaf device binds the stored local access user MAC table to the newly created BD domain mapping, defines a new BD domain MAC routing table, and a pair of A-Leafs advertises a default MAC route to the upper-layer S-Leaf or RR through each EVPN instance in the BD domain.

[0114] The above-described embodiments of this disclosure effectively solve the problem of large-capacity MAC announcements at Layer 2 of large networks, simplify configuration and maintenance, and further improve network scale development and stability.

[0115] The embodiments described above require no additional hardware costs, only software upgrades for support.

[0116] Figure 6 This is a schematic diagram of the structure of some other embodiments of the access leaf node device disclosed herein. For example... Figure 6 As shown, the access leaf node device includes a memory 61 and a processor 62.

[0117] Memory 61 is used to store instructions, and processor 62 is coupled to memory 61. Processor 62 is configured to execute instructions stored in memory to implement the above embodiments (e.g., Figures 2-4 The positioning method described in any embodiment.

[0118] like Figure 6 As shown, the access leaf node device also includes a communication interface 63 for exchanging information with other devices. Additionally, the access leaf node device includes a bus 64, through which the processor 62, communication interface 63, and memory 61 communicate with each other.

[0119] Memory 61 may include high-speed RAM, and may also include non-volatile memory, such as at least one disk drive. Memory 61 may also be a memory array. Memory 61 may also be divided into blocks, and the blocks may be combined into virtual volumes according to certain rules.

[0120] Furthermore, processor 62 may be a central processing unit (CPU), an application-specific integrated circuit (ASIC), or one or more integrated circuits configured to implement embodiments of the present disclosure.

[0121] The present disclosure provides an enhanced EVPN service provision method by accessing leaf node devices in the above embodiments. It defines a new MAC forwarding mechanism that does not require VLAN replanning and configuration changes to the related OLT technology, thereby effectively solving problems such as OLT VLAN overlap, network MAC storm loops, and high requirements for device MAC entries.

[0122] According to another aspect of this disclosure, a metropolitan area network is provided, such as Figure 3 As shown, it may include access leaf node device A-Leaf, wherein:

[0123] The access leaf node device A-Leaf can be any of the embodiments described above (e.g.) Figure 5 or Figure 6 The access leaf node device described in the embodiment).

[0124] In some embodiments of this disclosure, such as Figure 3 As shown, the metropolitan area network disclosed herein may include an optical line terminal, wherein:

[0125] An optical line terminal (OLT) is used to access control message broadcasts from user-side devices, which are forwarded through serving leaf node devices. The control message broadcast is an uplink broadcast request.

[0126] In some embodiments of this disclosure, the optical line terminal can also be used to access the user-side device's traffic via uplink unicast, find the gateway media access control address of the user-side device, and forward it.

[0127] In some embodiments of this disclosure, such as Figure 3 As shown, the metropolitan area network disclosed herein may include user-side equipment, wherein:

[0128] The user-side equipment is used to respond to the broadcast of control messages via downlink unicast. The unicast packets responded by the user-side equipment hit the unknown media access control address in the serving leaf node equipment and are forwarded to the access leaf node equipment. After reaching the access leaf node equipment, the user-side gateway media access control address is looked up and forwarded to the optical line terminal.

[0129] The embodiments of this disclosure propose a metropolitan area network that employs an enhanced EVPN service provision method. These embodiments primarily utilize enhanced EVPN technology to address issues arising from the use of VPLS for broadband services in new metropolitan area network construction. These issues include high-capacity MAC announcements, loop instability, and network MAC oscillations, leading to network and service forwarding failures and difficulty in fault location. Furthermore, the disclosure addresses the overlap between the VPWS (Virtual Private Wire Service) method and existing OLT VLANs. By defining a new enhanced EVPN MAC forwarding implementation mechanism, the disclosure enhances network reliability, promotes the pilot and large-scale deployment of new metropolitan area networks, further simplifies network configuration and maintenance management, and reduces network construction and operation costs.

[0130] According to another aspect of this disclosure, a non-transitory computer-readable storage medium is provided, wherein the non-transitory computer-readable storage medium stores computer instructions that, when executed by a processor, implement any of the embodiments described above (e.g., Figures 2-4 The Ethernet Virtual Private Network service provision method described in any embodiment.

[0131] The above-described embodiments of the present disclosure use a non-transitory computer-readable storage medium and an enhanced EVPN service provisioning method. A new MAC forwarding mechanism is defined, which does not require VLAN replanning and configuration changes to the related OLT technology. This effectively solves problems such as OLT VLAN overlap, network MAC storm loops, and high requirements for device MAC entries.

[0132] Those skilled in the art will understand that embodiments of this disclosure can be provided as methods, apparatus, or computer program products. Therefore, this disclosure can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, this disclosure can take the form of a computer program product embodied on one or more computer-usable non-transitory storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0133] This disclosure is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this disclosure. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create a machine for implementing the flowchart illustrations. Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0134] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0135] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0136] The access leaf node device described above can be implemented as a general-purpose processor, programmable logic controller (PLC), digital signal processor (DSP), application-specific integrated circuit (ASIC), field-programmable gate array (FPGA) or other programmable logic device, discrete gate or transistor logic device, discrete hardware component or any suitable combination thereof for performing the functions described in this application.

[0137] This concludes the detailed description of the present disclosure. To avoid obscuring the concept of the disclosure, some details known in the art have not been described. Those skilled in the art will fully understand how to implement the technical solutions disclosed herein based on the above description.

[0138] Those skilled in the art will understand that all or part of the steps of the above embodiments can be implemented by hardware, or by a program instructing the relevant hardware to implement them. The program can be stored in a non-transitory computer-readable storage medium, such as a read-only memory, a disk, or an optical disk.

[0139] The description in this disclosure is provided for illustrative and descriptive purposes only and is not intended to be exhaustive or to limit the disclosure to its forms. Many modifications and variations will be apparent to those skilled in the art. The embodiments were chosen and described in order to better illustrate the principles and practical application of this disclosure and to enable those skilled in the art to understand this disclosure and to design various embodiments with various modifications suitable for a particular purpose.

Claims

1. A method for providing Ethernet Virtual Private Network services, characterized in that, include: Media access control address forwarding is performed based on the bridging domain media access control address routing table to provide Ethernet virtual private network services; The media access control address forwarding based on the bridging domain media access control address routing table includes: Create a new bridging domain media access control address routing forwarding table; The access leaf node device will bind the storage of the local access user media access control address table to the newly created bridge domain mapping; The access leaf node device sends the default media access control address route to the serving leaf node device or route reflector; The newly established bridging domain media access control address routing forwarding table includes: The access leaf node device has a detailed user-side gateway media access control address forwarding table and a bridging domain media access control address routing forwarding table. The bridging domain media access control address routing forwarding table is used to map and forward the detailed media access control address of the access leaf node device to the created bridging domain instance after binding it. Define the bridging domain functionality; Define a synchronization protection mechanism for the border gateway protocol.

2. The method for providing Ethernet virtual private network services according to claim 1, characterized in that, The route that the access leaf node device sends the default media access control address to the serving leaf node device or the route reflector includes: A pair of access leaf node devices advertises a default media access control address route to the upper-layer service leaf node device or route reflector through each Ethernet virtual private network instance in the bridging domain.

3. The method for providing Ethernet virtual private network services according to claim 1 or 2, characterized in that, Also includes: The access leaf node device receives the media access control address of the user plane-side gateway sent by the serving leaf node device; The access leaf node device receives the media access control address of the user plane gateway and the media access control address of the user accessing the local optical line terminal.

4. The method for providing Ethernet virtual private network services according to claim 1 or 2, characterized in that, Also includes: Different access leaf node device pairs are isolated through different Ethernet virtual private networks to ensure that the service leaf node device only looks for unknown media access control address routes within the scope of the corresponding Ethernet virtual private network instance.

5. The method for providing Ethernet virtual private network services according to claim 1 or 2, characterized in that, Also includes: The control message broadcast by the optical line terminal to access the user-side equipment is forwarded through the serving leaf node equipment, wherein the control message broadcast is an uplink broadcast request; The optical line terminal accesses the user-side equipment's traffic via uplink unicast and finds the gateway media access control address of the user-side equipment for forwarding. The user-side device responds to the broadcast control message via downlink unicast. The unicast packet responded by the user-side device hits the unknown media access control address at the serving leaf node device and is forwarded to the access leaf node device. After reaching the access leaf node device, the user-side gateway media access control address is looked up and forwarded to the optical line terminal.

6. The method for providing Ethernet virtual private network services according to claim 1 or 2, characterized in that, The defined bridging domain functions include: Define a bridging domain Ethernet segment identifier, used to establish and publish the second type of default route for Ethernet virtual private networks between access leaf node devices and service leaf node devices, enable dual-active mode, and enable one-to-one, many-to-one, or bridging domain mode on access leaf node devices. Access leaf node devices only need to receive the media access control address of the user plane gateway.

7. The method for providing Ethernet virtual private network services according to claim 6, characterized in that, The defined border gateway protocol synchronization protection mechanism includes: Establish a border gateway protocol session between a pair of access leaf node devices to synchronize information in the user media access control address routing table on the access leaf node device side, ensuring that the optical line terminal has dual uplink access to the leaf node device and interrupting one access controller link.

8. A device for accessing leaf nodes, characterized in that, include: The address forwarding module is used to forward media access control addresses based on the bridging domain media access control address routing table to provide Ethernet virtual private network services. The access leaf node device is used to perform operations to implement the Ethernet virtual private network service provision method as described in any one of claims 1-4 and 6-7.

9. A device for accessing leaf nodes, characterized in that, include: Memory, used to store instructions; A processor is configured to execute the instructions, causing the access leaf node device to perform operations that implement the Ethernet virtual private network service provision method as described in any one of claims 1-4 and 6-7.

10. A metropolitan area network, characterized in that, Includes the access leaf node device as described in claim 8 or 9.

11. A non-transitory computer-readable storage medium, characterized in that, The non-transitory computer-readable storage medium stores computer instructions that, when executed by a processor, implement the Ethernet virtual private network service provision method as described in any one of claims 1-4 and 6-7.

Images