Dual-network switch and switching network system

Abstract

The utility model provides a dual-network switch and a switching network system. Wherein the first downlink electrical port, the first MAC chip and the uplink optical port unit can form a first communication channel, the second downlink electrical port, the second MAC chip and the uplink optical port unit can form a second communication channel, and the first communication channel is physically isolated from the second communication channel. Therefore, two-channel communication of hardware physical isolation can be realized in one dual-network switch, one-machine dual-network physical isolation is realized, and two switches do not need to be arranged in a power distribution cabinet, so that the use number of the switches can be reduced, and the space occupied by the switches in the power distribution cabinet can be saved; therefore, the power distribution cabinet can support dual-channel communication through a limited internal space.

Description

Technical Field

[0001] This application relates to the field of power communication technologies, and particularly to a dual-network switch and a switching network system. Background Art

[0002] As one of the dedicated communication networks, the power system communication network is an essential part of the power system. The power system communication network can meet the needs of various power services such as dispatching telephones, administrative telephones, power grid automation, relay protection, safety automatic devices, computer networking, fax, and image transmission. Its operation affects the realization of power grid dispatching automation, power grid operation marketization, and power grid management informatization, and is an important means to ensure the safe, stable, and economic operation of the power grid.

[0003] With the progress of communication technologies, the main transmission mode of power system communication has developed from power line carrier, analog carrier, and digital carrier to optical fiber communication. According to the construction trend of optical cable lines, the proportion of optical fiber private networks in the distribution network communication network will reach 60% - 90% to serve as an auxiliary system for the distribution network. The introduction and development of optical fiber private networks can greatly improve the communication speed between the distribution network control center and distribution network end devices such as DTUs (switching station terminal devices), FTUs (feeder terminal devices), and security devices, and can also improve the efficiency of command issuance and data collection. In this article, the distribution network can be the power supply network between 110 kV substations, 10 kV power consumption areas, and 380 V power consumption devices.

[0004] To ensure network security, the distribution network communication network can include four levels of partitions, namely Security Zone I, Security Zone II, Security Zone III, and Security Zone IV. Among them, Security Zone I can be used as the control zone, and Security Zone II can be used as the non-control zone. The control zone and the non-control zone can be regarded as the production control major zone. Security Zone III can be used as the production management zone for transmitting production management information. Security Zone IV can be used as the management information zone for information management and office automation. The production management zone and the management information zone can be regarded as the management information major zone.

[0005] Among the above four partitions, Security Zone I and Security Zone II have relatively high requirements for security and reliability and belong to high-security-level regions. Security Zone III and Security Zone IV have relatively low requirements for security and reliability and belong to low-security-level regions. To ensure security and reliability, the high-security-level Security Zone I and Security Zone II need to be communicatively isolated from the low-security-level Security Zone III and Security Zone IV. Currently, the prior art achieves isolation through two sets of communication hardware systems. One set of communication hardware system is responsible for communicating with Security Zone III and Security Zone IV, and the other set of communication hardware system is responsible for communicating with Security Zone I and Security Zone II. The two sets of communication hardware systems are independently networked, and devices such as optical fiber links and switches are not shared, thereby achieving physical isolation.

[0006] In this case, the power distribution cabinet not only needs to accommodate the end devices of the distribution network, but also needs to accommodate the communication devices of two communication systems. However, the power distribution cabinet is generally set by the roadside and has limited internal space, so it is difficult to accommodate a large number of devices at the same time. Summary of the Invention

[0007] The purpose of this application aims to at least solve one of the above technical defects, especially the technical defect that it is difficult for the power distribution cabinet in the prior art to accommodate a large number of devices at the same time.

[0008] In a first aspect, some embodiments of this application provide a dual-network switch, including:

[0009] A first downlink electrical port for connecting to a first terminal device;

[0010] A second downlink electrical port for connecting to a second terminal device;

[0011] A first MAC chip connected to the first downlink electrical port;

[0012] A second MAC chip connected to the second downlink electrical port;

[0013] An uplink optical port unit, respectively connected to the first MAC chip and the second MAC chip, and used for connecting to an uplink switch;

[0014] Wherein, the uplink optical port is used to convert the first uplink electrical signal generated by the first MAC chip into a first uplink optical signal and convert the second uplink electrical signal generated by the second MAC chip into a second uplink optical signal in the case of uplink communication, and transmit the first uplink optical signal and the second uplink optical signal to the uplink switch;

[0015] The uplink optical port is further used to receive the first downlink optical signal and the second downlink optical signal transmitted by the uplink switch in the case of downlink communication, and respectively convert the first downlink optical signal and the second downlink optical signal into a first downlink electrical signal and a second downlink electrical signal, and send the first downlink electrical signal to the first MAC chip, and send the second downlink electrical signal to the second MAC chip.

[0016] In one of the embodiments, the uplink optical port unit includes an uplink dual-channel fusion optical port; the uplink dual-channel fusion optical port is respectively connected to the first MAC chip and the second MAC chip, and is used to connect to the uplink switch through a single optical fiber;

[0017] The uplink dual-channel integrated optical port is used for converting the first uplink electrical signal into the first uplink optical signal and converting the second uplink electrical signal into the second uplink optical signal in the case of uplink communication, combining the first uplink optical signal and the second uplink optical signal into an uplink combined signal, and transmitting the uplink combined signal to the uplink switch;

[0018] The uplink dual-channel integrated optical port is further used for receiving the downlink combined signal transmitted by the uplink switch and splitting the downlink combined signal into the first downlink optical signal and the second downlink optical signal in the case of downlink communication.

[0019] In one embodiment, the first terminal device is a device corresponding to Security Zone I or a device corresponding to Security Zone II, and the second terminal device is a device corresponding to Security Zone III and a device corresponding to Security Zone IV;

[0020] Or, the first terminal device is a device corresponding to Security Zone III and a device corresponding to Security Zone IV, and the second terminal device is a device corresponding to Security Zone I or a device corresponding to Security Zone II.

[0021] In a second aspect, an embodiment of the present application provides a switching network system, including:

[0022] The dual-network switch in any of the above embodiments is used as the layer-2 switch of the switching network system;

[0023] A layer-3 switch is connected to the uplink optical port unit of the layer-2 switch and is used for connecting to a first master station and a second master station;

[0024] Wherein, in the case of uplink communication, the layer-3 switch is used for receiving the first uplink optical signal and the second uplink optical signal transmitted by the layer-2 switch, generating a third uplink optical signal according to the first uplink optical signal, generating a fourth uplink optical signal according to the second uplink optical signal, and transmitting the third uplink optical signal to the first master station and transmitting the fourth uplink optical signal to the second master station;

[0025] The layer-3 switch is further used for receiving the third downlink optical signal issued by the first master station and the fourth downlink optical signal issued by the second master station respectively in the case of downlink communication, generating a first downlink optical signal according to the third downlink optical signal, generating a second downlink optical signal according to the fourth downlink optical signal, and transmitting the first downlink optical signal and the second downlink optical signal to the layer-2 switch.

[0026] In one embodiment, the layer-3 switch includes:

[0027] The first uplink optical and electrical multiplexing port is used to connect to the first master station;

[0028] The second uplink optical and electrical multiplexing port is used to connect to the second master station;

[0029] The third MAC chip is connected to the first uplink optical and electrical multiplexing port;

[0030] The fourth MAC chip is connected to the second uplink optical and electrical multiplexing port;

[0031] The downlink optical port unit is respectively connected to the third MAC chip, the fourth MAC chip, and the uplink optical port unit of the layer 2 switch;

[0032] Wherein, in the case of downlink communication, the first uplink optical and electrical multiplexing port is used to receive the third downlink optical signal and convert the third downlink optical signal into a third downlink electrical signal; the second uplink optical and electrical multiplexing port is used to receive the fourth downlink optical signal and convert the fourth downlink optical signal into a fourth downlink electrical signal; the third MAC chip is used to generate a fifth downlink electrical signal according to the third downlink electrical signal; the fourth MAC chip is used to generate a sixth downlink electrical signal according to the fourth downlink electrical signal; the downlink optical port unit is used to convert the fifth downlink electrical signal and the sixth downlink electrical signal into the first downlink optical signal and the second downlink optical signal respectively, and transmit the first downlink optical signal and the second downlink optical signal to the layer 2 switch;

[0033] In the case of uplink communication, the downlink optical port unit is used to receive the first uplink optical signal and the second uplink optical signal, and convert the first uplink optical signal and the second uplink optical signal into a fifth uplink electrical signal and a sixth uplink electrical signal respectively; the third MAC chip is used to generate a seventh uplink electrical signal according to the fifth uplink electrical signal; the fourth MAC chip is used to generate an eighth uplink electrical signal according to the sixth uplink electrical signal; the first uplink optical and electrical multiplexing port is used to convert the seventh uplink electrical signal into the third uplink optical signal and transmit the third uplink optical signal to the first master station; the second uplink optical and electrical multiplexing port is used to convert the eighth uplink electrical signal into the fourth uplink optical signal and transmit the fourth uplink optical signal to the second master station.

[0034] In one embodiment, the downlink optical port unit includes a downlink dual-channel integrated optical port; the downlink dual-channel integrated optical port is respectively connected to the third MAC chip and the fourth MAC chip, and is connected to the uplink dual-channel integrated optical port of the layer 2 switch through a single optical fiber;

[0035] The described downlink dual-channel fusion optical port is used to combine the first downlink optical signal and the second downlink optical signal into a downlink combined signal in the case of downlink communication, and transmit the downlink combined signal to the uplink dual-channel fusion optical port;

[0036] The downlink dual-channel fusion optical port is further used to receive the uplink combined signal transmitted by the uplink dual-channel fusion optical port and split the uplink combined signal into the first uplink optical signal and the second uplink optical signal in the case of uplink communication.

[0037] In one embodiment, the switching network system further includes:

[0038] A distribution network router, connected between the three-layer switch and the first master station;

[0039] An integrated data network router, connected between the three-layer switch and the second master station.

[0040] In one embodiment, the distribution network router is connected to the three-layer switch through an optical fiber, and the integrated data network router is connected to the three-layer switch through an optical fiber.

[0041] In one embodiment, the distribution network router is connected to the first master station through an optical fiber, and the integrated data network router is connected to the second master station through an optical fiber.

[0042] In one embodiment, the first downlink electrical port of the two-layer switch is connected to a first terminal device through a communication cable, and the second downlink electrical port of the two-layer switch is connected to a second terminal device through a communication cable.

[0043] In the dual-network switch and the switching network system provided in some embodiments of the present application, the first downlink electrical port, the first MAC chip, and the uplink optical port unit can form a first communication channel, and the second downlink electrical port, the second MAC chip, and the uplink optical port unit can form a second communication channel, and the first communication channel and the second communication channel are physically isolated. In this way, dual-channel communication with hardware physical isolation can be realized in a single dual-network switch, achieving physical isolation of one machine with two networks. There is no need to set two switches in the power distribution cabinet, thereby reducing the number of switches used, and further saving the space occupied by the switches in the power distribution cabinet, enabling the power distribution cabinet to support dual-channel communication through a limited internal space size. Description of the Drawings

[0044] To more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the accompanying drawings required for the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, without creative efforts, other accompanying drawings can be obtained based on these drawings.

[0045] Figure 1 In one embodiment, it is a schematic structural diagram of a dual-network switch;

[0046] Figure 2 In one embodiment, it is a system schematic diagram of a switching network system. Specific embodiments

[0047] The following will clearly and completely describe the technical solutions in the embodiments of the present application with reference to the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are only some embodiments of the present application, rather than all embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative efforts belong to the scope of protection of the present application.

[0048] In one embodiment, as Figure 1 shown, the present application provides a dual-network switch 10, including: a first downlink electrical port 110, a second downlink electrical port 120, a first MAC (Media Access Control) chip 130, a second MAC chip 140, and an uplink optical port unit. Among them, the uplink optical port unit is respectively connected to the first MAC chip 130 and the second MAC chip 140, and is used to connect to an uplink switch. The first MAC chip 130 can be connected to the first downlink electrical port 110, and the first downlink electrical port 110 can be connected to a first terminal device. The second MAC chip 140 can be connected to the second downlink electrical port 120, and the second downlink electrical port 120 can be connected to a second terminal device.

[0049] In the present application, the uplink optical port unit can be a port unit for optical communication and can be used to receive and transmit optical signals. The uplink optical port unit can include one or more uplink optical ports. It can be understood that the specific number of uplink optical ports can be determined according to actual situations, and no specific limitation is made herein.

[0050] The first downlink electrical port 110 can be a port for electrical communication with the first terminal device and can be used to transmit and receive electrical signals. The second downlink electrical port 120 can be a port for electrical communication with the second terminal device and can be used to transmit and receive electrical signals. In one example, when the dual-network switch 10 is used as a layer-2 switch in a distribution network switching network system, the first terminal device can be a device corresponding to security zone I or a device corresponding to security zone II, and the second terminal device is a device corresponding to security zone III or a device corresponding to security zone IV. In another example, when the dual-network switch 10 is used as a layer-2 switch in a distribution network switching network system, the first terminal device is a device corresponding to security zone III or a device corresponding to security zone IV, and the second terminal device is a device corresponding to security zone I or a device corresponding to security zone II.

[0051] Exemplarily, the device corresponding to security zone I or the device corresponding to security zone II can be, but is not limited to, DTU, FTU, etc., and the device corresponding to security zone III or the device corresponding to security zone IV can be, but is not limited to, access control devices, monitoring devices, etc.

[0052] The first MAC chip 130, the first downlink electrical port 110, and the uplink optical port unit can form a first communication channel, and the second MAC chip 140, the second downlink electrical port 120, and the uplink optical port unit can form a second communication channel. The first MAC chip 130 and the second MAC chip 140 are two independent MAC chips, and there is no data interaction between the first MAC chip 130 and the second MAC chip 140, and they are physically isolated from each other, so that the first communication channel and the second communication channel can achieve hardware physical isolation.

[0053] Specifically, in the case of uplink communication, the first MAC chip 130 can generate a first uplink electrical signal, and the second MAC chip 140 can generate a second uplink electrical signal. The uplink optical port unit can perform electro-optical conversion on the electrical signal output by the first MAC chip 130 and the electrical signal output by the second MAC chip 140 to convert the first uplink electrical signal into a first uplink optical signal and convert the second uplink electrical signal into a second uplink optical signal. The uplink optical and electrical unit can also transmit the first uplink optical signal and the second uplink optical signal to the upper-layer switch, so as to perform uplink communication with the upper-layer switch.

[0054] In the case of downlink communication, the uplink optical port unit can receive the first downlink optical signal and the second downlink optical signal from the upper-layer switch, and perform optoelectronic conversion on the received downlink optical signals to convert the downlink optical signals into downlink electrical signals. The uplink optical port unit can convert the first downlink optical signal into a first downlink electrical signal and convert the second downlink optical signal into a second downlink electrical signal. After completing the optoelectronic conversion, the uplink optical port unit can send the first downlink electrical signal to the first MAC chip 130 for processing and send the second downlink electrical signal to the second MAC chip 140 for processing. Further, the downlink electrical signal processed by the first MAC chip 130 can be sent to the first terminal device through the first downlink electrical port 110, and the downlink electrical signal processed by the second MAC chip 140 can be sent to the second terminal device through the second downlink electrical port 120.

[0055] In this application, the first downlink electrical port 110, the first MAC chip 130, and the uplink optical port unit can form a first communication channel, and the second downlink electrical port 120, the second MAC chip 140, and the uplink optical port unit can form a second communication channel, and the first communication channel and the second communication channel are physically isolated. In this way, dual-channel communication with hardware physical isolation can be realized in a dual-network switch 10, achieving physical isolation of one machine with two networks. There is no need to set two switches in the power distribution cabinet, so the number of switches used can be reduced, and the space occupied by the switches in the power distribution cabinet can be saved, enabling the power distribution cabinet to support dual-channel communication through a limited internal space size.

[0056] In one embodiment, the uplink optical port unit includes an uplink dual-channel fusion optical port 150. Among them, the uplink dual-channel fusion optical port 150 can adopt a special fusion Ethernet port design, integrating two independent communication channels in one dual-channel fusion optical port, and then two physically isolated optical signals can be transmitted on one optical fiber. In this way, the usage amount of optical fibers can be reduced and the number of optical fiber installations can be reduced, thereby reducing communication costs.

[0057] Specifically, the uplink dual-channel integrated optical port 150 can be respectively connected to the first MAC chip 130 and the second MAC chip 140, and can be connected to the uplink switch through an optical fiber. In the case of uplink communication, the uplink dual-channel integrated optical port 150 can perform electro-optical conversion and optical signal multiplexing. Specifically, in the case of uplink communication, the uplink dual-channel integrated optical port 150 can receive the first uplink electrical signal from the first MAC chip 130 and the second uplink electrical signal from the second MAC chip 140, and convert the first uplink electrical signal and the second uplink electrical signal into two independent uplink optical signals, which are the first uplink optical signal and the second uplink optical signal respectively. The uplink dual-channel integrated optical port 150 can perform multiplexing processing on the first uplink optical signal and the second uplink optical signal to obtain an uplink multiplexed signal, and transmit the uplink multiplexed signal to the upper-layer switch through the same optical fiber.

[0058] In the case of downlink communication, the uplink dual-channel integrated optical port 150 can perform optical signal demultiplexing and opto-electrical conversion. Specifically, in the case of downlink communication, the uplink dual-channel integrated optical port 150 can receive the downlink multiplexed signal from the uplink switch, and demultiplex the downlink multiplexed signal to obtain the first downlink optical signal and the second downlink optical signal. The uplink dual-channel integrated optical port 150 can convert the first downlink optical signal into a first downlink electrical signal, and transmit the first downlink electrical signal to the first MAC chip 130 for processing. The uplink dual-channel integrated optical port 150 can also convert the second downlink optical signal into a second downlink electrical signal, and transmit the second downlink electrical signal to the second MAC chip 140 for processing.

[0059] In one embodiment, the first MAC chip 130 can also be used to periodically collect network status information, obtain the first network status information, and transmit the first network status information to the uplink switch. The second MAC chip 140 is also used to periodically collect network status information, obtain the second network status information, and transmit the second network status information to the uplink switch.

[0060] In this embodiment, the first MAC chip 130 and the second MAC chip 140 can regularly collect the network status information of the network system, so that the upper-layer device (such as the dispatching center) can perform operation and maintenance inspection on the network system according to the collected first network status information and second network status information, and perform network anomaly warning / network anomaly alarm based on the operation and maintenance inspection results, improving the operation reliability and operation stability of the network system.

[0061] In one example, the network status information can include any one or any combination of optical link status, power information, device location information, device model information, device MAC address, IP (Internet Protocol) address, running time and other information.

[0062] In one embodiment, the first MAC chip 130 can receive a third upstream electrical signal through the first downstream electrical port 110 and determine the first terminal MAC address corresponding to the third upstream electrical signal. Among them, the third upstream electrical signal can be an upstream electrical signal sent by the first terminal device, the first terminal MAC address can be the MAC address of the first target terminal device, and the first target terminal device is the first terminal device that sends the third upstream electrical signal.

[0063] The first MAC chip 130 can perform permission verification on the first target terminal device according to the first terminal MAC address to determine whether the first target terminal device is a whitelist device. If the verification passes, it indicates that the first target terminal device is a whitelist device. In this case, the first MAC chip 130 can generate a first upstream electrical signal based on the third upstream electrical signal and complete upstream communication according to the first upstream electrical signal to forward the data information sent by the first target terminal device.

[0064] Further, in an example, if the verification fails, it indicates that the first target terminal device is a blacklist device. In this case, the first MAC chip 130 can refuse to forward the data information sent by the first target terminal device, so that the first target terminal device cannot establish communication with other devices.

[0065] Similarly, the second MAC chip 140 can receive a fourth upstream electrical signal through the second downstream electrical port 120 and determine the second terminal MAC address corresponding to the fourth upstream electrical signal. Among them, the fourth upstream electrical signal can be an upstream electrical signal sent by the second terminal device, the second terminal MAC address can be the MAC address of the second target terminal device, and the second target terminal device is the second terminal device that sends the fourth upstream electrical signal.

[0066] The second MAC chip 140 can perform permission verification on the second target terminal device according to the second terminal MAC address to determine whether the second target terminal device is a whitelist device. If the verification passes, it indicates that the second target terminal device is a whitelist device. In this case, the second MAC chip 140 can generate a second upstream electrical signal based on the fourth upstream electrical signal and complete upstream communication according to the second upstream electrical signal to forward the data information sent by the second target terminal device.

[0067] Further, in an example, if the verification fails, it indicates that the second target terminal device is a blacklist device. In this case, the second MAC chip 140 can refuse to forward the data information sent by the second target terminal device, so that the second target terminal device cannot establish communication with other devices.

[0068] In this embodiment, the first MAC chip 130 and the second MAC chip 140 can perform permission verification and communicate with each other when the verification is passed. In this way, the security and reliability of communication can be improved.

[0069] In one embodiment, the present application provides a switching network system. It can be understood that the switching network system can be applied to any communication network that requires physical isolation of dual communication channels. Exemplarily, the following embodiments will be described by taking the switching network system applied to the distribution network communication network as an example.

[0070] As Figure 2 shown, the switching network system may include: a three-layer switch 20 and the dual-network switch 10 of any of the above embodiments, and the dual-network switch 10 can be used as the two-layer switch of the switching network system. Among them, the uplink optical and electrical unit of the two-layer switch can be connected to the three-layer switch 20, and the three-layer switch 20 can also be connected to the first master station and the second master station. In one example, the first master station can be the master station corresponding to security zone I and the master station corresponding to security zone II, and the second master station can be the master station corresponding to security zone III and the master station corresponding to security zone IV. In another example, the first master station can be the master station corresponding to security zone III and the master station corresponding to security zone IV, and the second master station can be the master station corresponding to security zone I and the master station corresponding to security zone II.

[0071] In the case of uplink communication, the three-layer switch 20 can receive the first uplink optical signal and the second uplink optical signal sent by the two-layer switch, and respectively generate a third uplink optical signal and a fourth uplink optical signal according to the first uplink optical signal and the second uplink optical signal. The three-layer switch 20 can transmit the third uplink optical signal to the first master station and transmit the fourth uplink optical signal to the second master station.

[0072] In the case of downlink communication, the three-layer switch 20 can receive the third downlink optical signal from the first master station and the fourth downlink optical signal from the second master station, and respectively generate a first downlink optical signal and a second downlink optical signal according to the third downlink optical signal and the fourth downlink optical signal, and transmit the first downlink optical signal and the second downlink optical signal to the two-layer switch.

[0073] In this embodiment, by applying the dual-network switch 10 of any of the above embodiments as the two-layer switch of the switching communication network, the number of two-layer switches in the switching network system can be reduced, and thus the space occupied by the switches in the power distribution cabinet can be saved, so that the power distribution cabinet can support dual-channel communication through a limited internal space size.

[0074] In one embodiment, as Figure 2As described above, the layer-3 switch 20 may include: a first uplink optical and electrical multiplexing port 210, a second uplink optical and electrical multiplexing port 220, a third MAC chip 230, a fourth MAC chip 240, and a downlink optical port unit. Among them, the first uplink optical and electrical multiplexing port 210 may be used to connect to a first master station and is connected to the third MAC chip 230. The second uplink optical and electrical multiplexing port 220 may be used to connect to a second master station and is connected to the fourth MAC chip 240. The downlink optical port unit may be respectively connected to the third MAC chip 230, the fourth MAC chip 240, and the uplink optical port unit of the layer-2 switch.

[0075] In this application, the downlink optical port unit may be a port unit for optical communication and may be used to receive and transmit optical signals. The downlink optical port unit may include one or more downlink optical ports. It can be understood that the specific number of downlink optical ports may be determined according to actual situations, and this is not specifically limited herein.

[0076] The first uplink optical and electrical multiplexing port 210 may be a port for optical and electrical communication with the first master station and may support the reception and transmission of electrical signals as well as optical signals. The second uplink optical and electrical multiplexing port 220 may be a port for optical and electrical communication with the second master station and may support the reception and transmission of electrical signals as well as optical signals.

[0077] In this embodiment, the first uplink optical and electrical multiplexing port 210, the third MAC chip 230, and the downlink optical port unit may form a first communication channel of the layer-3 switch 20, and the second uplink optical and electrical multiplexing port 220, the fourth MAC chip 240, and the downlink optical port unit may form a second communication channel of the layer-3 switch 20, and the first communication channel and the second communication channel are physically isolated.

[0078] In this embodiment, the first communication channel of the layer-3 switch 20 fixedly performs data transmission with the first communication channel of the layer-2 switch, and the second communication channel of the layer-3 switch 20 fixedly performs data transmission with the second communication channel of the layer-2 switch. There is no communication link between the two communication channels, and the signals of the two communication channels are independent of each other, do not interfere with each other, and do not interact with each other, so as to achieve physical isolation and ensure data security.

[0079] Exemplarily, the first MAC chip 130 and the third MAC chip 230 may fixedly process the data corresponding to security zone I and security zone II, and the second MAC chip 140 and the fourth MAC chip 240 may fixedly process the data corresponding to security zone III and security zone IV.

[0080] Specifically, in the case of downlink communication, the first uplink optical and electrical multiplexing port 210 can receive the third downlink optical signal from the first master station, perform optical and electrical conversion on the third downlink optical signal to obtain a third downlink electrical signal, and transmit the third downlink electrical signal to the third MAC chip 230. Similarly, the second uplink optical and electrical multiplexing port 220 can receive the fourth downlink optical signal from the second master station, perform optical and electrical conversion on the fourth downlink optical signal to obtain a fourth downlink electrical signal, and transmit the fourth downlink electrical signal to the fourth MAC chip 240.

[0081] The third MAC chip 230 can process the third downlink electrical signal to obtain a fifth downlink electrical signal, and transmit the fifth downlink electrical signal to the downlink optical port unit. The fourth MAC chip 240 can process the fourth downlink electrical signal to obtain a sixth downlink electrical signal, and transmit the sixth downlink electrical signal to the downlink optical port unit. The downlink optical port unit can perform electro-optical conversion on the fifth downlink electrical signal and the sixth downlink electrical signal to convert the fifth downlink electrical signal into a first downlink optical signal and the sixth downlink electrical signal into a second downlink optical signal, and transmit the first downlink optical signal and the second downlink optical signal to the layer-2 switch.

[0082] In the case of uplink communication, the downlink optical port unit can receive the first uplink optical signal and the second uplink optical signal from the layer-2 switch and perform optical and electrical conversion to convert the first uplink optical signal into a fifth uplink electrical signal and the second uplink optical signal into a sixth uplink electrical signal. The third MAC chip 230 can receive the fifth uplink electrical signal from the downlink optical port unit and process the fifth uplink electrical signal to obtain a seventh uplink electrical signal. The first uplink optical and electrical multiplexing port 210 can perform electro-optical conversion on the seventh uplink electrical signal to convert the seventh uplink electrical signal into the third uplink optical signal and transmit the third uplink optical signal to the first master station.

[0083] Similarly, the fourth MAC chip 240 can receive the sixth uplink electrical signal from the downlink optical port unit and process the sixth uplink electrical signal to obtain an eighth uplink electrical signal. The second uplink optical and electrical multiplexing port 220 can perform electro-optical conversion on the eighth uplink electrical signal and transmit the converted fourth uplink optical signal to the second master station.

[0084] In this embodiment, the three-layer switch 20 can implement dual-channel communication with hardware physical isolation in a dual-network switch 10, achieving physical isolation of one machine with two networks. In this way, while achieving physical isolation, the number of layer-2 switches in the switching network system can be further reduced.

[0085] In one embodiment, the downlink optical port unit includes a downlink dual-channel integrated optical port 250. Among them, the downlink dual-channel integrated optical port 250 can adopt a special integrated Ethernet port design, integrating two independent communication channels in one dual-channel integrated optical port, and then two physically isolated optical signals can be transmitted on one optical fiber. In this way, the usage of optical fibers can be reduced and the number of deployed optical fibers can be reduced, thereby reducing communication costs.

[0086] Specifically, the downlink dual-channel integrated optical port 250 can be respectively connected to the third MAC chip 230 and the fourth MAC chip 240, and can be connected to the uplink dual-channel integrated optical port 150 of the layer-2 switch through one optical fiber. In the case of downlink communication, the downlink dual-channel integrated optical port 250 can perform electro-optical conversion and optical signal multiplexing. Specifically, in the case of downlink communication, the downlink dual-channel integrated optical port 250 can convert the fifth downlink electrical signal into the first downlink optical signal, convert the sixth downlink electrical signal into the second downlink optical signal, and multiplex the first downlink optical signal and the second downlink optical signal to obtain a downlink multiplexed signal. The downlink dual-channel integrated optical port 250 can transmit the downlink multiplexed signal to the uplink dual-channel integrated optical port 150 of the layer-2 switch.

[0087] In the case of uplink communication, the downlink dual-channel integrated optical port 250 can perform opto-electrical conversion and optical signal demultiplexing. Specifically, in the case of uplink communication, the downlink dual-channel integrated optical port 250 receives the uplink multiplexed signal from the layer-2 switch, and can demultiplex the uplink multiplexed signal to obtain the first uplink optical signal and the second uplink optical signal. The downlink dual-channel integrated optical port 250 can respectively perform opto-electrical conversion on the first uplink optical signal and the second uplink optical signal to respectively obtain the fifth uplink electrical signal and the sixth uplink electrical signal.

[0088] In one embodiment, the third MAC chip 230 is further configured to report the first network status information to the first master station when receiving the first network status information reported by the layer-2 switch. The fourth MAC chip 240 is further configured to report the second network status information to the second master station when receiving the second network status information reported by the layer-2 switch. In this way, the upper-layer device (such as the dispatching center) can perform operation and maintenance inspection on the network system according to the collected first network status information and second network status information, and perform network anomaly warning / network anomaly alarm based on the operation and maintenance inspection results, improving the operation reliability and operation stability of the network system.

[0089] In one embodiment, the third MAC chip 230 can also be used to periodically collect network status information, obtain the third network status information, and transmit the third network status information to the first master station. The fourth MAC chip 240 is further configured to periodically collect network status information, obtain the fourth network status information, and transmit the fourth network status information to the second master station.

[0090] In this embodiment, the third MAC chip 230 and the fourth MAC chip 240 can regularly collect the network status information of the network system, and forward the first network status information and the second network status information collected by the first MAC chip 130 and the second MAC chip 140, so that the upper-layer device (such as the scheduling center) can conduct a comprehensive operation and maintenance inspection of the network system based on the collected network status information, thereby enabling timely early warning or alarm for anomalies in the switching network system, and further improving the operation reliability and stability of the network system.

[0091] In one embodiment, the third MAC chip 230 can obtain a third downlink electrical signal through the first uplink optical and electrical multiplexing port 210, and determine the third terminal MAC address corresponding to the third downlink electrical signal. Among them, the third downlink electrical signal can be a downlink electrical signal sent by the first master station, the third terminal MAC address can be the MAC address of the third target terminal device, and the third target terminal device is the master station device that sends the third downlink electrical signal.

[0092] The third MAC chip 230 can perform permission verification on the third target terminal device according to the third terminal MAC address to determine whether the third target terminal device is a whitelist device. If the verification passes, it indicates that the third target terminal device is a whitelist device. In this case, the third MAC chip 230 can generate a fifth downlink electrical signal based on the third downlink electrical signal, and complete downlink communication according to the fifth downlink electrical signal to forward the data information sent by the third target terminal device.

[0093] Furthermore, in an example, if the verification fails, it indicates that the third target terminal device is a blacklist device. In this case, the third MAC chip 230 can refuse to forward the data information sent by the third target terminal device, so that the third target terminal device cannot establish communication with other devices.

[0094] Similarly, the fourth MAC chip 240 can obtain a fourth downlink electrical signal through the first uplink optical and electrical multiplexing port 210, and determine the fourth terminal MAC address corresponding to the fourth downlink electrical signal. Among them, the fourth downlink electrical signal can be a downlink electrical signal sent by the second master station, and the fourth terminal MAC address can be the MAC address of the fourth target terminal device, and the fourth target terminal device is the master station device that sends the fourth downlink electrical signal.

[0095] The fourth MAC chip 240 can perform permission verification on the fourth target terminal device according to the fourth terminal MAC address to determine whether the fourth target terminal device is a whitelist device. If the verification passes, it indicates that the fourth target terminal device is a whitelist device. In this case, the fourth MAC chip 240 can generate a sixth downlink electrical signal based on the fourth downlink electrical signal, and complete downlink communication according to the sixth downlink electrical signal to forward the data information sent by the fourth target terminal device.

[0096] Further, in one example, if the verification fails, it indicates that the fourth target terminal device is a blacklist device. In this case, the fourth MAC chip 240 can reject forwarding the data information sent by the fourth target terminal device, so that the fourth target terminal device cannot establish communication with other devices.

[0097] In this embodiment, the third MAC chip 230 and the fourth MAC chip 240 can perform permission verification and communicate when the verification passes. In this way, the security and reliability of communication can be improved.

[0098] In one embodiment, as Figure 2 shown, the switching network system of the present application may further include: a network configuration router 30 and an integrated data network router 40. Among them, the network configuration router 30 can be connected between the three-layer switch 20 and the first master station. The integrated data network router 40 can be connected between the three-layer switch 20 and the second master station.

[0099] In one embodiment, the network configuration router 30 is connected to the three-layer switch 20 through an optical fiber, and the integrated data network router 40 is connected to the three-layer switch 20 through an optical fiber, so that the communication efficiency of the switching network system can be improved through the optical fiber connection.

[0100] In one embodiment, the network configuration router 30 is connected to the first master station through an optical fiber, and the integrated data network router 40 is connected to the second master station through an optical fiber, so that the communication efficiency of the switching network system can be improved through the optical fiber connection.

[0101] In one embodiment, the first downlink electrical port 110 of the two-layer switch is connected to the first terminal device through a communication cable, and the second downlink electrical port 120 of the two-layer switch is connected to the second terminal device through a communication cable. In this way, the system cost of the switching network system can be reduced.

[0102] Finally, it should also be noted that in this text, relational terms such as first and second are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any actual relationship or order between these entities or operations. Moreover, the terms "comprising", "including" or any other variants thereof are intended to cover non-exclusive inclusion, such that a process, method, article or device comprising a series of elements not only includes those elements, but also includes other elements not expressly listed, or also includes elements inherent to such process, method, article or device. Without further limitation, an element defined by the statement "comprising an..." does not exclude the presence of additional identical elements in the process, method, article or device comprising said element. In this text, "a", "an", "the", "this" and "its" may also include the plural form, unless the context clearly indicates otherwise. "Plural" means at least two cases, such as 2, 3, 5 or 8, etc. "And / or" includes any and all combinations of the related listed items.

[0103] The various embodiments in this specification are described in a progressive manner. Each embodiment focuses on the differences from other embodiments. The various embodiments can be combined as needed, and the same or similar parts can be referred to each other.

[0104] The above description of the disclosed embodiments enables those skilled in the art to implement or use the present application. Various modifications to these embodiments will be obvious to those skilled in the art. The general principles defined herein can be implemented in other embodiments without departing from the spirit or scope of the present application. Therefore, the present application will not be limited to these embodiments shown herein, but rather will be accorded the widest scope consistent with the principles and novel features disclosed herein.

Claims

1. A dual-network switch, characterized in that: include: A first downstream electrical port, used for connecting to a first terminal device; The second downstream electrical port is used to connect to a second terminal device; A first MAC chip, connected to the first downstream electrical port; A second MAC chip connected to the second downstream electrical port; an uplink optical port unit, connected to the first MAC chip and the second MAC chip respectively, and used to connect to an uplink switch; The uplink optical port is used to convert the first uplink electrical signal generated by the first MAC chip into a first uplink optical signal, and convert the second uplink electrical signal generated by the second MAC chip into a second uplink optical signal in the case of uplink communication, and transmit the first uplink optical signal and the second uplink optical signal to the uplink switch; The upstream optical port is also used to receive the first downstream optical signal and the second downstream optical signal transmitted by the upstream switch in the case of downstream communication, and convert the first downstream optical signal and the second downstream optical signal into a first downstream electrical signal and a second downstream electrical signal respectively, and send the first downstream electrical signal to the first MAC chip, and send the second downstream electrical signal to the second MAC chip.

2. The dual network switch according to claim 1, characterized in that: The uplink optical port unit includes an uplink dual-channel fused optical port; the uplink dual-channel fused optical port is respectively connected to the first MAC chip and the second MAC chip, and is used to connect to the uplink switch through an optical fiber; The uplink dual-channel fused optical port is used to, in the case of uplink communication, convert the first uplink electrical signal into the first uplink optical signal, and convert the second uplink electrical signal into the second uplink optical signal, and combine the first uplink optical signal and the second uplink optical signal into an uplink combined signal, and transmit the uplink combined signal to the uplink switch; The upstream dual-channel fused optical port is further used to receive a downstream combined signal transmitted by the upstream switch in the case of downstream communication, and split the downstream combined signal into the first downstream optical signal and the second downstream optical signal.

3. The dual network switch according to any one of claims 1 to 2, characterized in that: The first terminal device is a device corresponding to security zone I or a device corresponding to security zone II, and the second terminal device is a device corresponding to security zone III or a device corresponding to security zone IV; Alternatively, the first terminal device is a device corresponding to security zone III and a device corresponding to security zone IV, and the second terminal device is a device corresponding to security zone I or a device corresponding to security zone II.

4. A switching network system, characterized in that: include: The dual-network switch according to any one of claims 1 to 3, used as a layer 2 switch of the switching network system; A layer 3 switch connected to the uplink optical port unit of the layer 2 switch and used to connect the first master station and the second master station; The layer 3 switch is used to receive the first uplink optical signal and the second uplink optical signal transmitted by the layer 2 switch in the case of uplink communication, generate a third uplink optical signal according to the first uplink optical signal, generate a fourth uplink optical signal according to the second uplink optical signal, transmit the third uplink optical signal to the first master station, and transmit the fourth uplink optical signal to the second master station; The three-layer switch is also used to receive, in the case of downlink communication, a third downlink optical signal sent by the first master station and a fourth downlink optical signal sent by the second master station, respectively, and generate a first downlink optical signal according to the third downlink optical signal, and generate a second downlink optical signal according to the fourth downlink optical signal, and transmit the first downlink optical signal and the second downlink optical signal to the two-layer switch.

5. The switching network system according to claim 4, characterized in that: The three-layer switch comprises: A first uplink optical-electrical multiplexing port, used for connecting to the first master station; A second uplink optical-electrical multiplexing port, used for connecting to the second master station; A third MAC chip is connected to the first uplink optical-electrical multiplexing port; a fourth MAC chip connected to the second uplink optical-electrical multiplexing port; A downlink optical port unit, connected to the third MAC chip, the fourth MAC chip and the uplink optical port unit of the layer 2 switch respectively; Wherein, in the case of downlink communication, the first uplink optoelectronic multiplexer port is used to receive the third downlink optical signal and convert the third downlink optical signal into a third downlink electrical signal; the second uplink optoelectronic multiplexer port is used to receive the fourth downlink optical signal and convert the fourth downlink optical signal into a fourth downlink electrical signal; the third MAC chip is used to generate a fifth downlink electrical signal according to the third downlink electrical signal; the fourth MAC chip is used to generate a sixth downlink electrical signal according to the fourth downlink electrical signal; the downlink optical port unit is used to convert the fifth downlink electrical signal and the sixth downlink electrical signal into the first downlink optical signal and the second downlink optical signal, respectively, and transmit the first downlink optical signal and the second downlink optical signal to the layer 2 switch; In the case of uplink communication, the downlink optical port unit is used to receive the first uplink optical signal and the second uplink optical signal, and convert the first uplink optical signal and the second uplink optical signal into a fifth uplink electrical signal and a sixth uplink electrical signal, respectively; the third MAC chip is used to generate a seventh uplink electrical signal according to the fifth uplink electrical signal; the fourth MAC chip is used to generate an eighth uplink electrical signal according to the sixth uplink electrical signal; the first uplink optoelectronic multiplexer port is used to convert the seventh uplink electrical signal into the third uplink optical signal, and transmit the third uplink optical signal to the first master station; the second uplink optoelectronic multiplexer port is used to convert the eighth uplink electrical signal into the fourth uplink optical signal, and transmit the fourth uplink optical signal to the second master station.

6. The switching network system according to claim 5, characterized in that: The downlink optical port unit includes a downlink dual-channel fused optical port; the downlink dual-channel fused optical port is respectively connected to the third MAC chip and the fourth MAC chip, and is connected to the uplink dual-channel fused optical port of the layer 2 switch through an optical fiber; The downstream dual-channel fused optical port is used to combine the first downstream optical signal and the second downstream optical signal into a downstream combined signal in the case of downstream communication, and transmit the downstream combined signal to the upstream dual-channel fused optical port; The downstream dual-channel integrated optical port is further used to receive an upstream combined signal transmitted by the upstream dual-channel integrated optical port in the case of upstream communication, and split the upstream combined signal into the first upstream optical signal and the second upstream optical signal.

7. The switching network system according to any one of claims 4 to 6, characterized in that: The switching network system further includes: A network distribution router, connected between the three-layer switch and the first main station; The integrated data network router is connected between the three-layer switch and the second main station.

8. The switching network system according to claim 7, characterized in that: The distribution network router is connected to the three-layer switch via optical fiber, and the integrated data network router is connected to the three-layer switch via optical fiber.

9. The switching network system according to claim 7, characterized in that: The distribution network router is connected to the first main station via optical fiber, and the integrated data network router is connected to the second main station via optical fiber.

10. The switching network system according to any one of claims 4 to 6, characterized in that: The first downstream electrical port of the layer 2 switch is connected to the first terminal device through a communication cable, and the second downstream electrical port of the layer 2 switch is connected to the second terminal device through a communication cable.

Images