Method, system, product, and medium for virtual local area network misconfiguration error detection for wireless networks

Abstract

The application discloses a kind of virtual local area network configuration error detection method, system, product and medium of wireless network, it is related to wireless network technical field, its technical scheme main point is: the topology between the port of network equipment in the wireless network to be detected is obtained;According to the topology, the port of at least one first network device is connected to the port of second network device;According to the virtual local area network associated with the port of at least one first network device and the virtual local area network associated with the port of second network device, it is determined whether the virtual local area network associated with the port of second network device is configured incorrectly;And when the virtual local area network of the port of second network device is configured incorrectly, the difference information missing in the virtual local area network associated with the port of second network device connected to the port of at least one first network device is determined, and the virtual local area network associated with the port of second network device is configured according to the difference information.

Description

Technical Field

[0001] This invention relates to the field of wireless network technology, and more specifically, to a method, system, product, and medium for detecting virtual local area network (VLAN) configuration errors in wireless networks. Background Technology

[0002] In wireless network deployment scenarios such as enterprises, campuses, hospitals, and large commercial complexes, wireless network systems have become critical infrastructure supporting business operations. The SSID of an Access Point (AP) is typically bound to a service VLAN, and user terminals access the corresponding VLAN (Virtual Local Area Network) through different SSIDs to achieve service isolation and access control. In actual operation and maintenance, if the service VLAN configured on the AP side is not allowed in tagged mode on the corresponding port of the switch, or if there are VLAN configuration omissions along the entire backhaul link, it can lead to network failures such as terminals being unable to obtain IP addresses and services not working. Furthermore, such configuration errors are highly concealed, and traditional manual device-by-device verification is inefficient and has a high rate of missed detections, severely impacting wireless network availability and operational efficiency.

[0003] Currently, VLAN configuration verification mainly relies on manual login to check each device one by one, or only supports viewing VLAN information for a single device. It cannot perform end-to-end consistency verification by combining the uplink and downlink topology of APs and switches. Furthermore, some solutions require additional VLAN data collection, leading to inconsistent data sources and discrepancies with the actual operating status of the network. This makes it difficult to quickly locate link-level VLAN configuration deficiencies and easily results in configuration omissions or errors. For example, if the uplink port of a switch at a certain level does not correctly contain all the VLANs of its downlink ports, it will cause network interruption or abnormal service access. These problems are highly concealed in complex network topologies, requiring significant time for troubleshooting and severely impacting the stability of the wireless network and the continuity of services. Summary of the Invention

[0004] The purpose of this invention is to provide a method, system, product, and medium for detecting virtual local area network (VLAN) configuration errors in wireless networks, which solves the problem of low troubleshooting efficiency in existing technologies when there are omissions, redundancies, or inconsistencies in the VLANs associated with the uplink and downlink ports of switches at various levels of wireless networks.

[0005] The above-mentioned technical objective of the present invention is achieved through the following technical solution:

[0006] The first aspect of this invention provides a method for detecting virtual local area network (VLAN) configuration errors in a wireless network, the method comprising:

[0007] Obtain the topology relationship between ports of network devices in the wireless network to be detected; wherein the network devices include at least one first network device and at least one second network device;

[0008] Based on the topology, determine the ports of the second network devices to which at least one port of the first network device is connected;

[0009] Based on the VLAN associated with a port of at least one first network device and the VLAN associated with a port of a second network device, determine whether the VLAN associated with a port of the second network device is misconfigured; and

[0010] When the virtual LAN configuration of the port of the second network device is incorrect, the missing difference information of the virtual LAN associated with the port of the second network device to which the port of the first network device is connected is determined, and the virtual LAN associated with the port of the second network device is configured according to the difference information.

[0011] A second aspect of the present invention provides a virtual local area network configuration system for a wireless network, the system comprising:

[0012] The topology acquisition module is used to acquire the topology relationships between ports of network devices in the wireless network to be detected; wherein the network devices include at least one first network device and at least one second network device;

[0013] The port determination module is used to determine, based on the topology, the port of the second network device to which at least one port of the first network device is connected;

[0014] The configuration error determination module is used to determine whether the virtual local area network (VLAN) associated with the port of the second network device is misconfigured, based on the VLAN associated with the port of at least one first network device and the VLAN associated with the port of the second network device; and

[0015] The port configuration module is used to determine the missing difference information of the virtual local area network associated with the port of the second network device when the virtual local area network configuration of the port of the second network device is incorrect, and to configure the virtual local area network associated with the port of the second network device based on the difference information.

[0016] A third aspect of the present invention provides a computer program product comprising program instructions that, when executed by an electronic device, cause the electronic device to perform the steps of a virtual local area network configuration error detection method for a wireless network as provided in the first aspect.

[0017] A fourth aspect of the present invention provides a computer-readable storage medium comprising a computer program that, when executed by one or more processors, implements a virtual local area network configuration error detection method for a wireless network as provided in the first aspect.

[0018] Compared with the prior art, the present invention has the following beneficial effects:

[0019] This invention determines the topology between access points and switches at each level through a bottom-up detection path in the wireless network. Based on this topology, it performs bottom-up consistency checks based on the core rule that the uplink port VLAN equals the union of all downlink port VLANs. The checks begin at the lowest level, the access switches (connections between access points and access switches), then proceed to the aggregation layer (connections between access switches and aggregation switches), and finally to the core layer (connections between aggregation switches and core switches). This hierarchical detection path ensures that the port configurations of lower-level switches are checked and corrected before verifying the port configurations of a particular layer of switches, avoiding error propagation, guaranteeing the comprehensiveness and logical rigor of the detection process, and automatically generating VLAN sets for each layer of switches when configuration discrepancies are detected. This achieves a leap from passively discovering problems to proactively providing solutions, significantly improving the operational efficiency and accuracy of large-scale wireless networks. Attached Figure Description

[0020] The accompanying drawings, which are included to provide a further understanding of embodiments of the invention and form part of this application, do not constitute a limitation thereof. In the drawings:

[0021] Figure 1 A schematic diagram illustrating a method for detecting virtual local area network configuration errors in a wireless network according to an embodiment of the present invention; Figure 2 This is a schematic diagram of the topological relationship of the layered network architecture (core layer, aggregation layer, access layer) provided in the embodiments of the present invention. Detailed Implementation

[0022] To make the objectives, technical solutions, and advantages of the present invention clearer, the present invention will be further described in detail below with reference to the embodiments and accompanying drawings. The illustrative embodiments and descriptions of the present invention are only used to explain the present invention and are not intended to limit the present invention.

[0023] It should be noted that the terms "comprising" or "may include" used in the various embodiments of this application indicate the presence of the claimed function, operation, or element, and do not limit the addition of one or more functions, operations, or elements. Furthermore, as used in the various embodiments of this application, the terms "comprising," "having," and their cognates are intended only to indicate a specific feature, number, step, operation, element, component, or combination of the foregoing, and should not be construed as primarily excluding the presence of one or more other features, numbers, steps, operations, elements, components, or combinations of the foregoing, or adding one or more combinations of the foregoing.

[0024] It should be understood that terms such as "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include one or more of that feature. In the description of this invention, "a plurality of" means two or more, unless otherwise explicitly specified.

[0025] In modern enterprise, campus, hospital, and large commercial complex wireless network deployment scenarios, wireless network systems have become critical infrastructure supporting business operations. A wireless network system comprises multiple sites, with network service providers managing one or more wireless networks at each site. Of course, as is common knowledge in this field, each site can also include multiple wireless networks. Each site includes multiple network access servers, such as access points (APs), switches, or routers. An access point (AP) can be any type of access point, including commercial or organizational APs, wireless routers, or any other device connected to a wired network that provides wireless network access to clients within the site.

[0026] Accordingly, each site also includes multiple wireless client devices and multiple wired client devices. Wireless client devices include smartphones, tablets, mobile devices, wireless terminals, and wearable devices. Wired client devices include printers, environmental sensors, or any other device connected to a limited network and configured to communicate over one or more wireless networks.

[0027] To provide wireless network services and / or facilitate communication over the wireless network to wireless and wired client devices, access points (APs) and other wired client-side devices at a site are connected directly or indirectly to one or more network devices (e.g., switches, routers, etc.) via physical cables (e.g., Ethernet cables). The site comprises a mesh or partial mesh topology in a hub-and-spoke architecture where the client-side devices at the site may be connected to two or more switches and / or routers. For example, the site's APs are connected to a top-of-rack (TOR) switch, and the TOR switch is connected to a chassis switch. For example, the switches may provide redundant (multi-homed) connectivity to one or more networks (e.g., the Internet and / or a corporate intranet) for client devices. Each of the multiple access point APs is connected to a switch. Each site 102 may include one or more switches connected to access points and / or other switches. In some examples, the interconnected switches and routers comprise a wired local area network (LAN) located at the site carrying the wireless network.

[0028] Each switch within a network system may include one or more ports configured to connect to other network devices. For example, a port of one switch may be connected to a port of another switch (referred to as a "switch-to-switch connection"). In another instance, a switch port may alternatively or additionally be connected to a port of an access point (AP) (referred to as an "AP-to-switch connection").

[0029] With the surge in the number of access terminals and the diversification of service types in wireless network systems, the architecture of wireless network systems has become increasingly complex, often deploying hundreds or even thousands of access points (APs) connected through multiple layers of switches, including access, aggregation, and core switches. To ensure secure isolation and traffic control for different departments or services, Virtual Local Area Network (VLAN) technology is widely used. However, this large-scale, hierarchical network environment makes VLAN configuration and management exceptionally cumbersome and error-prone. For example, in one instance, one or more ports of a network device connected at a site might be misconfigured, potentially causing problems for end users, IoT devices, and / or client devices at that site accessing the network via the network device.

[0030] Currently, VLAN configuration and verification in wireless network systems primarily rely on manual operation by engineers. Engineers must log into each switch individually to verify that the VLAN settings on the uplink and downlink ports conform to design specifications, which can easily lead to omissions or errors. For example, if an uplink port of a switch at a certain level does not correctly include all VLANs of its downlink ports, it can cause network outages or abnormal service access. These problems are highly concealed in complex network topologies, requiring significant time for troubleshooting and severely impacting the stability of the wireless network and the continuity of services.

[0031] To address the low efficiency of existing technologies in troubleshooting anomalies such as omissions, redundancies, or inconsistencies in the VLAN configurations of uplink and downlink ports on switches at various levels of a wireless network, this invention establishes a bottom-up detection path to determine the topology between access points and switches at each level. Based on this topology, and using the core rule that the uplink port VLAN equals the union of all downlink port VLANs, a bottom-up consistency check is performed. The check begins at the lowest level, the access switch (connection between access points and access switches), then proceeds to the aggregation layer (connection between access switches and aggregation switches), and finally to the core layer (connection between aggregation switches and core switches). This hierarchical detection path ensures that the port configurations of lower-level switches are checked and corrected before verifying the port configuration of a particular switch, preventing error propagation, guaranteeing the comprehensiveness and logical rigor of the detection process, and automatically generating VLAN sets for each layer of switches when configuration discrepancies are detected. This achieves a shift from passively discovering problems to proactively providing solutions, significantly improving the operational efficiency and accuracy of large-scale wireless networks.

[0032] The following will describe in detail the method for detecting virtual local area network configuration errors in the wireless network provided in this embodiment, with reference to specific implementation methods.

[0033] Figure 1 A flowchart illustrating a method for detecting virtual local area network (VLAN) configuration errors in a wireless network is shown. The method may include the following steps:

[0034] Step S101: Obtain the topology relationship between ports of network devices in the wireless network to be detected; wherein, the network devices include at least one first network device and at least one second network device.

[0035] Specifically, this embodiment is based on the existing CESP platform's collected and stored operational data of APs and switches in MongoDB, requiring no additional data collection logic. The VLAN information of the access point APs comes from the data-vlans field of the apbaseInfo table (actively reported by the access point AP via the MQTT protocol, containing the service VLAN ID bound to the SSID), and the VLAN configuration of the switch ports comes from the valns field of the sw_vlan table (containing a list of Tag / UnTag ports corresponding to each VLAN). Furthermore, leveraging the existing device link relationships and topology management capabilities of the CESP platform, a data foundation is provided for automated VLAN configuration error detection.

[0036] The connectivity relationships between network devices in a wireless network are fixed. Therefore, the topology between the ports of network devices in the wireless network under test can be obtained by traversing the network devices from bottom to top (i.e., from the first network device to the second network device, where the first network device is an access point, and the second network device is a multi-level switch such as access, aggregation, and core switches, hereinafter referred to as access switches, aggregation switches, and core switches). It should be noted that the number of access switches, aggregation switches, and core switches can be one or more; this example does not impose a specific limitation.

[0037] First, define A as the set of all access points (APs) in a wireless network system.

[0038] definition Define a set of all access switches. Define a set of all aggregation switches. The set of all core switches is denoted as , therefore, the set of the second network devices is denoted as . .

[0039] For any switch Let its port set be Ports are categorized into uplink ports and downlink ports based on the connection direction: (Uplink port set) (Downlink port set), and For any port (Whether it's a port on a switch or an uplink port on an access point (AP), define the VLAN set associated with that port as follows:) , This is a set of virtual LAN tag IDs (the tag IDs are the allowed numbers in the natural number field).

[0040] If port (Belonging to a switch or access point (AP) and port) (Belonging to a switch) Physically directly connected, the connection relationship is recorded as... If the access point (AP) The uplink port is ,and , If a certain downlink port of an access switch is used, then access point APa establishes a topology relationship with that access switch.

[0041] Topology describes the connections between network devices in the wireless network to be detected, such as the connection between the first network device and the second network device, or the connections between the second network devices. In one example, when the first network device is an access point, such as access points AP1-AP5, the second network device is an access switch. When the downlink port is 1, the connection relationship is that the uplink ports of access points AP1-AP5 are respectively connected to the access switch. The downlink port 1 is connected. In one example, when the first network device is an access switch... At times, for example, access switches 1- At 5 o'clock, the second network device is an aggregation switch. When the downlink port is 1, the connection relationship is access switch. 1- The uplink ports of 5 are respectively connected to the aggregation switch The downstream port 1 is connected.

[0042] The VLAN information of the access point (AP) and the VLAN information of the switch port described in the above embodiments are illustrated as follows: The set of service VLAN IDs currently in effect at the access point AP, such as [20, 30, 40], are logically all of the tagged type. The VLAN information of the switch port includes the Tag port list, UnTag port list, VLAN status and other information corresponding to each VLAN. For example, the Tag port of VLAN 20 includes ["1 / 1 / 1", "1 / 1 / 2"].

[0043] S102, Based on the topology, determine the port of the second network device to which at least one port of the first network device is connected.

[0044] In this embodiment, based on the example of the topology described above, the uplink and downlink ports that are connected can be determined from the connection relationship. The uplink port can be the port of the access point or the switch, while the downlink port only includes the ports of the switches at each level.

[0045] Since this embodiment provides a bottom-up detection process, that is, from the access point to the switches at each level, when the first network device is the access point, then the second network device is the access switch. Correspondingly, when the first network device is the access switch, the second network device is the aggregation switch.

[0046] For example, for each access point APa, its uplink port is defined as And there is a certain access switch The downstream port connected to it , denoted as: .

[0047] Specifically, the topological relationships between ports of network devices in the wireless network to be detected can be abstracted into a directed tree structure. Each topological relationship contains the following attributes, as shown in Table 1 below:

[0048] Table 1

[0049] upMac / upPort MAC address / uplink port of uplink network device lowerMac / lowerPort MAC address / downlink port of downlink network device up-vlans The set of Tag VLANs allowed to pass through the upport port of the uplink network device lower-vlans The set of Tag VLANs allowed to pass through the lowerPort port of the downlink network device childList The set of sub-links in the current topology lower-child-vlans The union of lower-VLANs and up-VLANs of all sub-links in the current topology represents the total set of VLANs required on the downlink side. up-lose-vlans The difference between the required VLANs (lower-VLANs + lower-child-VLANs) and the up-VLANs in the topology link, i.e., the VLANs missing from the uplink port. lower-lose-vlans The difference between the total required VLANs (lower-child-VLANs) and the lower-VLANs on the downlink side, i.e., the VLANs missing from the downlink ports.

[0050] S103, based on the virtual local area network associated with the port of at least one first network device and the virtual local area network associated with the port of the second network device, determine whether the virtual local area network associated with the port of the second network device is configured incorrectly.

[0051] Specifically, when the first network device is an access point and the second network device is an access switch, the process of determining whether the VLAN associated with the downlink port of the access switch is misconfigured is as follows: Based on the topology relationship between the uplink port of at least one access point and the downlink port of the access switch, determine the downlink port of the access switch connected to the uplink port of at least one access point; if the VLAN associated with the uplink port of at least one access point is not completely included in the VLAN associated with the downlink port of the access switch, then the VLAN associated with the downlink port of the access switch is misconfigured; when the VLAN associated with the downlink port of the access switch is misconfigured, perform a difference operation on the VLAN associated with the uplink port of at least one access point and the VLAN associated with the downlink port of the access switch to obtain the first downlink difference information missing from the VLAN associated with the downlink port of the access switch; configure the VLAN associated with the downlink port of the access switch based on the first downlink difference information.

[0052] For example, for each access switch For the connected access point APa, the uplink port of access point APa Downlink port of access switch Connect and check the consistency of the virtual LAN configuration. If This indicates that the virtual LAN associated with the downlink port of the access switch is misconfigured. This represents a virtual local area network associated with the uplink port of at least one access point. This indicates the virtual local area network associated with the downlink port of the access switch.

[0053] Special verification logic for AP scenarios: The service VLAN reported by the AP must be allowed in tagged mode on all ports of the entire backhaul link (from the AP to the core switch). Therefore, it is only necessary to verify whether the required VLAN on the downlink side is a subset of the uplink port VLAN. If a difference exists, it is determined to be a configuration error. Combining the content of Table 1 above, the general topology link determination logic is as follows: If up-lose-vlans is not empty: the uplink port upPort is missing the corresponding VLAN, indicating port {upPort} losevlan: {up-lose-vlans}. If lower-lose-vlans is not empty: the downlink port lowerPort is missing the corresponding VLAN, indicating port {lowerPort} losevlan: {lower-lose-vlans}. If either of the two topology links does not meet the requirements, it is marked as a mismatched topology link.

[0054] Based on the above description of determining the VLANs associated with the downlink ports of the access switch, the process of determining whether the VLANs associated with the uplink ports of the access switch are configured incorrectly is as follows: Perform a union operation on the VLANs associated with the downlink ports of the access switch after configuring the first downlink difference information to obtain the VLANs associated with all downlink ports of the access switch; if the VLANs associated with the uplink ports of the access switch are not equal to the VLANs associated with all downlink ports of the access switch, then the VLANs associated with the uplink ports of the access switch are configured incorrectly.

[0055] Access Switch uplink port In other words, let the set of downlink ports of the access switch corresponding to the uplink ports of the access switch be... Then, perform a union operation on the virtual LANs associated with the downlink ports of the access switch to obtain the virtual LANs associated with all downlink ports of the access switch, expressed as: , This represents the virtual local area network associated with all downlink ports of the access switch. Therefore, if , If the virtual LAN associated with the uplink port of the access switch is incorrect, it indicates that the virtual LAN associated with the uplink port of the access switch is configured incorrectly.

[0056] Specifically, the detection results of the configuration can also be visualized on the display components of smart devices. For example, links within the detection range are colored according to the detection results: red indicates VLAN mismatch topology links, green indicates matching topology links, and gray indicates topology links outside the detection range. The port information and corresponding VLAN information of the network devices at both ends of the topology link can also be displayed, facilitating quick problem location. After the detection is completed, a summary box of detection results pops up, displaying the missing VLAN numbers of all ports by network device dimension.

[0057] S104, when the virtual LAN configuration of the port of the second network device is incorrect, determine the missing difference information of the virtual LAN associated with the port of the second network device to which at least one port of the first network device is connected, and configure the virtual LAN associated with the port of the second network device according to the difference information.

[0058] Therefore, a difference operation is performed on the VLAN associated with the uplink port of at least one access point and the VLAN associated with the downlink port of the access switch to obtain the first downlink difference information. The calculation method is as follows: ,in, This indicates the first missing downlink difference information for the virtual LAN associated with the downlink port of the access switch. For example, if... The included virtual LAN tag IDs are VLAN10, VLAN20, and VLAN100, while If the included virtual LAN tag IDs are VLAN10 and VLAN20, then the first downlink difference information is the tag number VLAN100.

[0059] Finally, based on this calculation method This allows you to determine the configuration result of the virtual LAN associated with the downlink port of the access switch. Alternatively, you can configure the virtual LAN associated with the downlink port of the access switch according to the first downlink difference information.

[0060] When the VLAN associated with the uplink port of the access switch is misconfigured, perform a difference operation on all VLANs associated with the downlink ports of the access switch and the VLANs associated with the uplink ports of the access switch to obtain the first uplink difference information missing from the VLANs associated with the uplink ports of the access switch; configure the VLANs associated with the uplink ports of the access switch according to the first uplink difference information.

[0061] In this embodiment, a difference operation is performed on the virtual local area networks (VLANs) associated with all downlink ports of the access switch and the VLANs associated with the uplink ports of the access switch. The expression is as follows: ,like ,but ,in, This indicates the first upward difference information.

[0062] As can be seen, this invention establishes a consistency rule that the set of VLANs associated with uplink ports equals the union of the set of VLANs associated with downlink ports. It clarifies a consistent verification rule: the set of VLANs allowed through any switch's uplink port must equal the union of all corresponding VLANs associated with its downlink ports. This rule ensures that VLAN configurations can be propagated flawlessly from the network edge to the core, serving as the criterion for end-to-end consistency verification.

[0063] It should be noted that the configuration error detection process described in this embodiment is for detecting the virtual LAN associated with the downlink and uplink ports of one access switch. However, at the access switch level, there are generally multiple access switches. Therefore, by repeating the detection process described in the above embodiment, the detection of virtual LAN configuration errors of the remaining access switches can be completed. This embodiment will not describe any additional implementation methods.

[0064] Accordingly, based on the configuration error detection process of the virtual LAN associated with the downlink and uplink ports of the access switch described above, the present invention adopts the same principle for the aggregation switch and the core switch. Therefore, this embodiment only provides a brief description of the configuration error detection of the virtual LAN of the aggregation switch and the core switch.

[0065] When the first network device is an access switch and the second network device is an aggregation switch, the process for determining whether the VLAN associated with the downlink port of the aggregation switch is misconfigured is as follows: Based on the topology relationship between the uplink port of at least one access switch and the downlink port of the aggregation switch, determine the downlink port of the aggregation switch connected to the uplink port of at least one access switch; if the set of VLANs associated with the uplink port of at least one access switch is not completely included in the set of VLANs associated with the downlink port of the aggregation switch, then the VLAN associated with the downlink port of the aggregation switch is misconfigured; when the VLAN associated with the downlink port of the aggregation switch is misconfigured, perform a difference operation on the set of VLANs associated with the uplink port of at least one access switch and the set of VLANs associated with the downlink port of the aggregation switch to obtain the missing second downlink difference information of the VLAN associated with the downlink port of the aggregation switch; configure the VLAN associated with the downlink port of the aggregation switch based on the second downlink difference information.

[0066] After configuring the VLANs associated with the downlink ports of the aggregation switch based on the second downlink difference information, the process for determining whether the VLANs associated with the uplink ports of the aggregation switch are configured incorrectly is as follows: Perform a union operation on the VLANs associated with the downlink ports of the aggregation switch after configuring the second downlink difference information to obtain all VLANs associated with the downlink ports of the aggregation switch; if the VLANs associated with the uplink ports of the aggregation switch are not equal to the VLANs associated with all the downlink ports of the aggregation switch, then the VLANs associated with the uplink ports of the aggregation switch are configured incorrectly; when the VLANs associated with the uplink ports of the aggregation switch are configured incorrectly, perform a difference operation on all the VLANs associated with the downlink ports of the aggregation switch and the VLANs associated with the uplink ports of the aggregation switch to obtain the missing second uplink difference information of the VLANs associated with the uplink ports of the aggregation switch; configure the VLANs associated with the uplink ports of the aggregation switch based on the second uplink difference information.

[0067] When the first network device is an aggregation switch and the second network device is a core switch, the process for determining whether the VLAN associated with the downlink port of the core switch is misconfigured is as follows: Based on the topology relationship between the uplink port of at least one aggregation switch and the downlink port of the core switch, determine the downlink port of the core switch connected to the uplink port of at least one aggregation switch; if the VLAN associated with the uplink port of at least one aggregation switch is not completely included in the VLAN associated with the downlink port of the core switch, then the VLAN associated with the downlink port of the core switch is misconfigured; when the VLAN associated with the downlink port of the core switch is misconfigured, perform a difference operation on the VLAN associated with the uplink port of at least one aggregation switch and the VLAN associated with the downlink port of the core switch to obtain the missing third downlink difference information of the VLAN associated with the downlink port of the core switch; configure the VLAN associated with the downlink port of the core switch based on the third downlink difference information.

[0068] After configuring the VLANs associated with the downlink ports of the core switch based on the third downlink difference information, the process for determining whether the VLANs associated with the uplink ports of the core switch are configured incorrectly is as follows: Perform a union operation on the VLANs associated with the downlink ports of the core switch after configuring the third downlink difference information to obtain all VLANs associated with the downlink ports of the core switch; if the VLANs associated with the uplink ports of the core switch are not equal to the VLANs associated with all the downlink ports of the core switch, then the VLANs associated with the uplink ports of the core switch are configured incorrectly; when the VLANs associated with the uplink ports of the core switch are configured incorrectly, perform a difference operation on all the VLANs associated with the downlink ports of the core switch and the VLANs associated with the uplink ports of the core switch to obtain the missing third uplink difference information in the VLANs associated with the uplink ports of the core switch; configure the VLANs associated with the uplink ports of the core switch based on the third uplink difference information.

[0069] In summary, during each configuration error detection process, when a VLAN configuration fails to meet consistency rules, the system immediately calculates the differences between the switch's downlink and uplink ports and clearly indicates which VLANs need to be added to which ports. This ability to automatically generate structured correction suggestions represents a leap from passively detecting anomalies to proactively providing correction strategies. It significantly reduces the need for manual intervention, thereby greatly lowering troubleshooting costs and the technical requirements for maintenance personnel, and improving the overall maintainability of the wireless network.

[0070] In conjunction with the steps of the configuration error detection method described in the above embodiments of the present invention, this embodiment also provides an instance detection process, such as... Figure 2 As shown, the Figure 2 This diagram illustrates the topology of a layered network architecture (core layer, aggregation layer, access layer), comprising the following devices and connections: The core layer includes one core switch, which acts as an uplink firewall; and two downlink aggregation switches (aggregation switch 1 and aggregation switch 2). The aggregation layer includes aggregation switch 1 and aggregation switch 2. Aggregation switch 1 downlinks two access switches (access switch 1 and access switch 2); aggregation switch 2 downlinks one access switch (access switch 3). The access layer includes three access switches (access switch 1, access switch 2, and access switch 3), each downlinking to access points (APs) (AP1, AP2, AP3, and AP4).

[0071] For any access point AP (e.g., APn), its VLAN set is Vlan_APn. Check the VLAN configuration of the uplink ports of the access switch and the aggregation switch of the access point AP: if a VLAN exists in Vlan_APn but does not exist in the Tagged VLAN list of the above ports, then an alarm is triggered.

[0072] Input (Alarm Triggering Conditions / Data): VLAN information of Access Point (AP): AP4's VLANs are VLAN 70 and 80; VLAN configuration of the uplink port of Aggregation Switch 2: Aggregation Switch 2's uplink link to the core switch is VLAN 70 (i.e., the VLAN of this port is 70, not including VLAN 80). VLAN configuration of the uplink port of Access Switch 3: Access Switch 3's uplink link to Aggregation Switch 2 is (VLAN 70, 80), this port's VLAN 70 / 80 is satisfied; however, the uplink port of the core switch from the Aggregation Switch is not satisfied.

[0073] Output (Alarm Result): Alarm Type: VLAN Configuration Mismatch (AP downlink VLAN is not tagged on the aggregation / core uplink port). Alarm Object: Port of the uplink core switch of aggregation switch 2 (or the downlink VLAN link of AP4). Alarm Content: "The VLAN (vlan80) of AP4 is not configured as a tagged VLAN on the port of the uplink core switch of aggregation switch 2, which poses a risk of VLAN mismatch. Please check the port VLAN configuration."

[0074] In the topology diagram, the link (upstream core switch of aggregation switch 2) is highlighted in red (indicating VLAN mismatch), and when hovered over, detailed VLAN missing information ("missing vlan80") is displayed.

[0075] "Source tracing and verification" from the bottom up, starting from the access point (AP):

[0076] To determine the VLAN requirements of the endpoint access point (AP): Read the VLAN configuration of AP4 to obtain the set of VLANs required for its services: Vlan_AP4 = {70, 80}.

[0077] The first hop for upward verification: Access switch 3 uplink aggregation switch 2: Access switch 3 uplink port tagged VLANs: 70, 80; If all VLANs (70, 80) in VLAN_AP4 are in the tagged list of this port, the verification passes.

[0078] The second hop for upward verification: Uplink core switch of aggregation switch 2: Uplink port of aggregation switch 2 (connected to the core switch) tagged VLAN: 70. If VLAN 80 in VLAN_AP4 is not in the tagged list of this port, the verification fails and an anomaly flag is triggered.

[0079] Detection results and output: Anomaly location: AP4's service VLAN 80 was not tagged on the port of "uplink core switch of aggregation switch 2", which caused the traffic of VLAN 80 to be unable to be transmitted back from AP4 to the core. This is a configuration defect of "incomplete uplink port VLAN pass-through".

[0080] Alarm type: VLAN configuration mismatch (AP downlink VLAN is not in the aggregation uplink core port tagged list).

[0081] Alarm target: Topology link of the uplink core switch of aggregation switch 2.

[0082] Alarm message: "The VLAN (vlan80) of AP4 is not configured as a tagged VLAN on the port of the uplink core switch of aggregation switch 2, which poses a risk of VLAN mismatch. Please check the port VLAN configuration."

[0083] This invention also provides a virtual local area network configuration error detection system for wireless networks, the system comprising:

[0084] The topology acquisition module is used to acquire the topology relationships between ports of network devices in the wireless network to be detected; wherein the network devices include at least one first network device and at least one second network device;

[0085] The port determination module is used to determine, based on the topology, the port of the second network device to which at least one port of the first network device is connected;

[0086] The configuration error determination module is used to determine whether the virtual local area network (VLAN) associated with the port of the second network device is misconfigured, based on the VLAN associated with the port of at least one first network device and the VLAN associated with the port of the second network device; and

[0087] The port configuration module is used to determine the missing difference information of the virtual local area network associated with the port of the second network device when the virtual local area network configuration of the port of the second network device is incorrect, and to configure the virtual local area network associated with the port of the second network device based on the difference information.

[0088] This application embodiment provides a virtual local area network configuration error detection system for a wireless network, which is similar to the one described above. Figure 1The method for detecting virtual local area network (VLAN) configuration errors in a wireless network shown is a technical solution based on the same inventive concept. Through the detailed description of the method for detecting VLAN configuration errors in a wireless network provided in the above embodiments, those skilled in the art can clearly understand the implementation process of the VLAN configuration error detection system in this embodiment. Therefore, for the sake of brevity, it will not be described again here.

[0089] Accordingly, this invention provides a virtual LAN configuration error detection system for wireless networks. It determines the topology between access points and switches at each level through a bottom-up detection path. Based on this topology, it performs bottom-up consistency checks based on the core rule that the uplink port VLAN equals the union of all downlink port VLANs. The checks begin at the lowest level, the access switch (connection between access points and access switches), then proceed to the aggregation layer (connection between access switches and aggregation switches), and finally to the core layer (connection between aggregation switches and core switches). This hierarchical detection path ensures that the port configuration of lower-level switches is checked and corrected before verifying the port configuration of a switch at a certain level, avoiding error propagation, guaranteeing the comprehensiveness and logical rigor of the detection process, and automatically generating VLAN sets for each layer of switches when configuration discrepancies are detected. This achieves a leap from passively discovering problems to proactively providing solutions, significantly improving the operational efficiency and accuracy of large-scale wireless networks. The set theory-based method is not dependent on specific network equipment brands or models and is universally applicable to various wireless network environments using a standard layered architecture (access-aggregation-core). Whether it's a campus, industrial park, hospital, or large enterprise network, as long as its VLAN configuration logic conforms to the basic rules of multi-layer switching, this system can be effectively applied. At the same time, its algorithm design has excellent scalability, easily handling the growth of network scale (such as the number of APs and switches), providing sustainable operation and maintenance support for future network expansion.

[0090] This invention also provides a computer-readable storage medium, which is a memory device in a computer device for storing programs and data. It is understood that the computer-readable storage medium here can include both the built-in storage medium in the computer device and extended storage media supported by the computer device. The computer-readable storage medium provides storage space that stores the operating system of a terminal. Furthermore, the storage space also stores one or more instructions suitable for loading and execution by a processor. These instructions can be one or more computer programs (including program code). It should be noted that the computer-readable storage medium here can be high-speed RAM or non-volatile memory, such as at least one disk storage device. The processor can load and execute one or more instructions stored in the computer-readable storage medium to implement the corresponding steps of the virtual local area network configuration error detection method for a wireless network in the above embodiments. Those skilled in the art should understand that embodiments of the present invention can be provided as methods, systems, or computer program products. Therefore, the present invention can take the form of a completely hardware embodiment, a completely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention can take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0091] This invention also provides a computer program product containing program instructions. The computer program product can be software or program products containing program instructions, capable of running on a computing device or stored on any usable medium. When the computer program product runs on at least one electronic device, it causes the at least one electronic device to execute a virtual local area network configuration error detection method for a wireless network.

[0092] The specific embodiments described above further illustrate the purpose, technical solution, and beneficial effects of the present invention. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the scope of protection of the present invention.

Claims

1. A method for detecting virtual local area network (VLAN) configuration errors in a wireless network, characterized in that, The methods include: Obtain the topology relationship between ports of network devices in the wireless network to be detected; wherein the network devices include at least one first network device and at least one second network device; Based on the topology, determine the ports of the second network devices to which at least one port of the first network device is connected; Based on the VLAN associated with a port of at least one first network device and the VLAN associated with a port of a second network device, determine whether the VLAN associated with a port of the second network device is misconfigured; and When the virtual LAN configuration of the port of the second network device is incorrect, determine the missing difference information of the virtual LAN associated with the port of the second network device to which the port of the first network device is connected, and configure the virtual LAN associated with the port of the second network device according to the difference information. Specifically, when the first network device is an access point and the second network device is an access switch, the downlink port of the access switch connected to the uplink port of at least one access point is determined based on the topology relationship between the uplink port of at least one access point and the downlink port of the access switch. If the virtual local area network (VLAN) associated with the uplink port of at least one access point is not completely included in the VLAN associated with the downlink port of the access switch, then the VLAN associated with the downlink port of the access switch is misconfigured. When the VLAN associated with the downlink port of the access switch is misconfigured, a difference operation is performed on the VLAN associated with the uplink port of at least one access point and the VLAN associated with the downlink port of the access switch to obtain the first downlink difference information missing from the VLAN associated with the downlink port of the access switch. The VLAN associated with the downlink port of the access switch is configured based on the first downlink difference information. After configuring the VLANs associated with the downlink ports of the access switch based on the first downlink difference information, a union operation is performed on the VLANs associated with the downlink ports of the access switch after configuring the first downlink difference information to obtain the VLANs associated with all downlink ports of the access switch. If the VLANs associated with the uplink ports of the access switch are not equal to the VLANs associated with all downlink ports of the access switch, then the VLANs associated with the uplink ports of the access switch are configured incorrectly. When the VLANs associated with the uplink ports of the access switch are configured incorrectly, a difference operation is performed on the VLANs associated with all downlink ports of the access switch and the VLANs associated with the uplink ports of the access switch to obtain the first uplink difference information that is missing from the VLANs associated with the uplink ports of the access switch. The VLANs associated with the uplink ports of the access switch are then configured based on the first uplink difference information.

2. The method for detecting virtual local area network configuration errors in a wireless network according to claim 1, characterized in that, When the first network device is an access switch and the second network device is an aggregation switch, the method includes: Based on the topological relationship between the uplink port of at least one access switch and the downlink port of the aggregation switch, determine the downlink port of the aggregation switch to which the uplink port of at least one access switch is connected. If the set of VLANs associated with the uplink ports of at least one access switch is not fully included in the set of VLANs associated with the downlink ports of the aggregation switch, then the VLANs associated with the downlink ports of the aggregation switch are misconfigured. When the VLAN associated with the downlink port of the aggregation switch is misconfigured, a difference operation is performed on the set of VLANs associated with the uplink ports of at least one access switch and the set of VLANs associated with the downlink ports of the aggregation switch to obtain the second downlink difference information missing from the VLANs associated with the downlink ports of the aggregation switch. Configure the virtual LAN associated with the downlink ports of the aggregation switch based on the second downlink difference information.

3. The method for detecting virtual local area network configuration errors in a wireless network according to claim 2, characterized in that, After configuring the virtual LAN associated with the downlink port of the aggregation switch based on the second downlink difference information, the method further includes: Perform a union operation on the virtual local area networks associated with the downlink ports of the aggregation switch after configuring the second downlink difference information to obtain all the virtual local area networks associated with the downlink ports of the aggregation switch. If the VLAN associated with the uplink port of the aggregation switch is not equal to the VLAN associated with all the downlink ports of the aggregation switch, then the VLAN associated with the uplink port of the aggregation switch is configured incorrectly. When the virtual LAN associated with the uplink port of the aggregation switch is misconfigured, perform a difference operation on all virtual LANs associated with the downlink ports of the aggregation switch and the virtual LANs associated with the uplink ports of the aggregation switch to obtain the second uplink difference information missing from the virtual LANs associated with the uplink ports of the aggregation switch. Configure the virtual LAN associated with the uplink port of the aggregation switch based on the second uplink difference information.

4. The method for detecting virtual local area network configuration errors in a wireless network according to claim 1, characterized in that, When the first network device is an aggregation switch and the second network device is a core switch, the method includes: Based on the topology relationship between the uplink port of at least one aggregation switch and the downlink port of the core switch, determine the downlink port of the core switch to which the uplink port of at least one aggregation switch is connected. If the VLAN associated with the uplink port of at least one aggregation switch is not fully contained in the VLAN associated with the downlink port of the core switch, then the VLAN associated with the downlink port of the core switch is misconfigured. When the VLAN associated with the downlink port of the core switch is misconfigured, perform a difference operation on the VLAN associated with the uplink port of at least one aggregation switch and the VLAN associated with the downlink port of the core switch to obtain the missing third downlink difference information of the VLAN associated with the downlink port of the core switch. Configure the virtual LAN associated with the downlink ports of the core switch based on the third downlink difference information.

5. The method for detecting virtual local area network configuration errors in a wireless network according to claim 4, characterized in that, After configuring the virtual LAN associated with the downlink ports of the core switch based on the third downlink difference information, the method further includes: Perform a union operation on the virtual local area networks associated with the downlink ports of the core switch after configuring the third downlink difference information to obtain the virtual local area networks associated with all downlink ports of the core switch. If the VLAN associated with the uplink port of the core switch is not equal to the VLAN associated with all the downlink ports of the core switch, then the VLAN associated with the uplink port of the core switch is configured incorrectly. When the VLAN associated with the uplink port of the core switch is misconfigured, perform a difference operation on all VLANs associated with the downlink ports of the core switch and the VLANs associated with the uplink ports of the core switch to obtain the missing third uplink difference information of the VLANs associated with the uplink ports of the core switch. Configure the virtual LAN associated with the uplink port of the core switch based on the third uplink difference information.

6. A virtual local area network configuration error detection system for a wireless network, characterized in that, The system includes: The topology acquisition module is used to acquire the topology relationships between ports of network devices in the wireless network to be detected; wherein the network devices include at least one first network device and at least one second network device; The port determination module is used to determine, based on the topology, the port of the second network device to which at least one port of the first network device is connected; The configuration error determination module is used to determine whether the virtual local area network (VLAN) associated with the port of the second network is misconfigured, based on the VLAN associated with the port of at least one first network device and the VLAN associated with the port of the second network device; and The port configuration module is used to determine the missing difference information of the virtual local area network associated with the port of the second network device when the virtual local area network of the port of the first network device is configured incorrectly, and to configure the virtual local area network associated with the port of the second network device according to the difference information. Specifically, when the first network device is an access point and the second network device is an access switch, the downlink port of the access switch connected to the uplink port of at least one access point is determined based on the topology relationship between the uplink port of at least one access point and the downlink port of the access switch. If the virtual local area network (VLAN) associated with the uplink port of at least one access point is not completely included in the VLAN associated with the downlink port of the access switch, then the VLAN associated with the downlink port of the access switch is misconfigured. When the VLAN associated with the downlink port of the access switch is misconfigured, a difference operation is performed on the VLAN associated with the uplink port of at least one access point and the VLAN associated with the downlink port of the access switch to obtain the first downlink difference information missing from the VLAN associated with the downlink port of the access switch. The VLAN associated with the downlink port of the access switch is configured based on the first downlink difference information. After configuring the VLANs associated with the downlink ports of the access switch based on the first downlink difference information, a union operation is performed on the VLANs associated with the downlink ports of the access switch after configuring the first downlink difference information to obtain the VLANs associated with all downlink ports of the access switch. If the VLANs associated with the uplink ports of the access switch are not equal to the VLANs associated with all downlink ports of the access switch, then the VLANs associated with the uplink ports of the access switch are configured incorrectly. When the VLANs associated with the uplink ports of the access switch are configured incorrectly, a difference operation is performed on the VLANs associated with all downlink ports of the access switch and the VLANs associated with the uplink ports of the access switch to obtain the first uplink difference information that is missing from the VLANs associated with the uplink ports of the access switch. The VLANs associated with the uplink ports of the access switch are then configured based on the first uplink difference information.

7. A computer program product containing program instructions, characterized in that, When the program instructions are executed by the electronic device, the electronic device performs the steps of the virtual local area network configuration error detection method for a wireless network as described in any one of claims 1 to 5.

8. A computer-readable storage medium, characterized in that, The computer-readable storage medium includes a computer program that, when executed by one or more processors, implements a virtual local area network configuration error detection method for a wireless network as described in any one of claims 1 to 5.

Images