200 results about "Virtual Router Redundancy Protocol" patented technology

The invention provides a method for realizing synchronous switching of a virtual router redundancy protocol (VRRP) in a dual-machine hot backup system. The method comprises the following steps: (a) automatic system switching strategy list is configured for main equipment and standby equipment according to running state and failure events of the equipment, and the configuration information is interacted by a data synchronization link; (b) after a failure event occurs, comprehensive optimum decision is performed on the main equipment and the standby equipment to determine whether to perform the main-standby switching; and (c) after the main-standby switching is determined, newly determined operational standby equipment initiatively reduces VRRP priority of the equipment according to the priority of a VRRP packet configured for opposite terminal equipment to perform the main-standby switching. The method helps fully utilize the message transmission capacity of the data synchronization link between the dual machines, and correlate the synchronous switching of the VRRP with the running state of the equipment, and the use of the automatic switching strategy list fully ensures the accuracy and reliability of the synchronous switching of the VRRP.

The invention discloses a user access method and a device based on an SSL (Secure Socket Layer) VPN (Virtual Private Network) gateway cluster. The gateways in the SSL VPN gateway cluster use a VRRP (Virtual Router Redundancy Protocol), and are configured with cluster neighbor table entries which contain the current states of neighbor gateways and current user connecting number. The method comprises the following steps that the gateways maintain the cluster neighbor table entries through a cluster neighbor probe process which is periodically executed; and when the master gateway receives an SSL access request transmitted to the SSL VPN gateway cluster VRRP backup tram address by a user terminal, and judges that no gateway processing source IP (Internet Protocol) address is the access request of the source IP address of the SSL access request, according to the current states of the neighbor gateways and the current user connecting number in the cluster neighbor table entries, as well as the current user connecting number of the master gateway, the gateway which has minimum load and can be accessible is selected, and the user terminal is redirected to the neighbor gateway. The invention can realize SSL VPN gateway cluster load balancing and improves the property of a system.

The invention discloses a method and a device for updating an ARP (Address Resolution Protocol) information table; the method comprises the steps of monitoring an ARP information message sent by a virtual router redundancy protocol (VRRP) gateway and synchronizing the message to the existing standby firewall line card when the existing main firewall line card is in a normal working state; switching the existing standby firewall line card into a new main firewall line card when the existing main firewall line card is judged to be in an abnormal working state; sending an address resolution protocol (ARP) request broadcast message to at least one server in a local area network; and updating media access control (MAC) address information table according to the received ARP information message after receiving the ARP response single-broadcast message responded by the server. With the adoption of the technical sachem, the access success rate is improved when an external network accesses the server in the local area network after the firewall line card carries out hot standby switch.

The invention provides a method for realizing VRRP (Virtual Router Redundancy Protocol) flow transmission and routing equipment, wherein the method comprises the following steps: (A) main routing equipment divides a network section into more than two sub network sections, distributes a corresponding virtual MAC (Media Access Control) address to each sub network section and distributes each sub network section and the corresponding virtual MAC address to the routing equipment included in the virtual router; and (B) the routing equipment distributed with the sub network section and the virtual MAC address publishes the sub network section route corresponding to the distributed sub network section to uplink equipment connected with the virtual router. By using the invention, the problem caused by randomly selecting a route forwarding downlink flow from an equivalent route by the uplink equipment is avoided.

In a packet transmission router used in a VRRP (Virtual Router Redundancy Protocol) network having a VR (Virtual Router) function, when virtual routers VR are realized by the VRRP, the routing control information that each VR manages is prevented from being mixed with that of other VR. When an active packet transmission router transmits a VRRP packet to a standby packet transmission router, an identifier indicating which virtual router belongs to the VRRP packet is added to the VRRP packet before the transmission of the VRRP packet.

This invention relates to a method for realizing router interface backup by a virtual router redundant protocol which is first of all to connect multiinterface on the router into a same LAM to join in a same multicast then to arrange same virtual router number and virtual IP address on the said multi interface and let them join in a same virtual router, every interface joined in a same virtual router selects a master interface and a backup interface based on mutual priority, realizing backup between interfaces on VRRP router which does not influence the original backup between routers of VRRP, and realizing backup of default gate whether is one or many routers in network.

A solution for virtual router redundancy for server virtualization includes, at a network device configured as a backup router of a virtual router, examining a packet stored in a memory of the network device. Responsive to the examining, the network device determines whether to forward the packet via a network towards a destination or to send the packet via the network to a master router of the virtual router for forwarding of the packet, by the master router, towards the destination.

The invention discloses a load balancing module in a financial real-time trading system, which is located between a terminal and a background server cluster. The load balancing module comprises at least two servers, each load balancing server is provided with a foreground network card and a background network card and adopts a VRRP (virtual router redundancy protocol). The foreground network cards are in one set and are externally provided with a unique IP (internet protocol) address and a unique MAC (media access control) address and internally divided into a master control foreground network card and the reset of backup foreground network cards. The background network cards are also in one set and are externally provided with a unique IP (internet protocol) address and a unique MAC (media access control) address and internally divided into a master control background network card and the reset of backup background network cards. Each load balancing server operates a load balancing program, and the load balancing program comprises a load balancing process, a multi-machine hot standby process and a monitoring process; and in the multi-machine hot standby process, the master control foreground network card and the master control background network card determined by the VRRP protocol are monitored, and the master control foreground network card and the master control background network card must be on a same load balancing server.

The invention relates to a real-time service recovering device and method in network communication technical field. Based on BFD (bidirectional forward detection) technique, it provides a VRRP (Virtual Router Redundancy Protocol) fast converging method, detecting master router failure by BFD to compose VRRP message and transmitting the VRRP message to VRRP module, and implementing fast switching master and backup routers. And it implements combination of BFD and VRRP, detects failure by BFD, able to implement fast switching backup router into master router, and overcoming the defect of long converging time of the current VRRP.

A method and apparatus adapting a Virtual Router Redundancy Protocol (VRRP) between a set of physical SEGs that realize a V-SEG function towards a remote IPsec / IKE peer. In tandem with the VRRP, a new protocol, referred to herein as the IPsec / IKE SA Transfer Protocol (SATP), is introduced to exchange IKE and IPsec SA information between VRRP capable SEGs. SATP synchronizes all participating SEGs with respect to dynamic IPsec state information in near real time. Thus, in the event of a master VRRP SEG failure, one of the hot-standby SEGs takes over the V-SEG function. This allows the V-SEG function to remain functional despite the possible failure of one or more participating SEGs.

The invention provides a switching method and a device of a main / standby router in a virtual route redundancy protocol. The method comprises the following steps: the main router in the virtual router group receives the first announcement information which is sent by the first router except for the main router in the group and which carries the first dynamic priority value of the first router; the main router compares the first dynamic priority value with the own second dynamic priority value, if the first dynamic priority value is less than the second dynamic priority value, then the main router state is maintained; and the first dynamic priority value and the second dynamic priority value are respectively the number of the message of which the destination MAC address is the virtual MAC address of the virtual router group which is respectively received in the recent announcement period by the first router and the main router. By introducing the mechanism of dynamic priority to the VRRP protocol, the invention avoids network oscillation caused by unnecessary switching of main / standby router, thus improving the stability of the network.

The invention discloses a method for forwarding flow by means of a virtual router redundancy protocol (VRRP) backup set and equipment. The method comprises the following steps: master equipment of the VRRP backup set sends user ARP (address resolution protocol) information which is learned by the master equipment to backup equipment of the VRRP backup set, and the ARP information at least comprises a user IP address and a user VLAN (virtual local area network) identifier; the backup equipment records all user ARP information sent by the master equipment; when the backup equipment is switched to master equipment, according to user ARP information which is recorded by the backup equipment, flow forwarding is carried out. According to the method and the equipment in the invention, flow interruption time in a network fault is reduced, and flow forwarding efficiency is raised.

The invention relates to the technical field of network data transmission and discloses a method for achieving gateway dynamic load distribution. The method for achieving the gateway dynamic load distribution mainly includes the following steps: (1) parameters of a gateway cluster are configured; (2) a main gateway is chosen; and (3) dynamic load redirection is conducted, wherein after the main gateway with a virtual router redundancy protocol (VRRP) virtual address receives a security socket layer (SSL) access request of a user terminal, the main gateway selects one gateway of the gateway cluster to serve as a target gateway of the access request and sends a message which is redirected to the target gateway to the user terminal. According to the method for achieving the gateway dynamic load distribution, hardware investment of a load distributor is reduced. The main gateway only needs to be set in the gateway cluster, and then the gateway dynamic load distribution can be achieved. Load balancing of an SSL virtual private network (VPN) gateway cluster is achieved to a certain degree, and the cost is lowered. The problems of the high cost caused by the load distributor and a system performance bottleneck are solved. The load distributor is not adopted, and then the gateway dynamic load distribution can be achieved fast.

The invention is directed to routing data packets in networks having routers configured as a virtual router using virtual router redundancy protocol (VRRP). Embodiments of the invention adjust route metrics to aid in providing predictable selection of routes into VRRP subnets. Advantageously, providing predictable selection of routes into VRRP subnets enhances a network operator's ability to meet service level agreements for critical or delay sensitive applications.

The invention relates to a method for realizing VRRP (virtual route abundant protocol) switch between main and backup devices, wherein said method comprises that: each VRRP device detects the state of all appointed protocols of ascending chain; the VRRP device via the detecting result adjusts priority; via the priority relation of VRRP devices, switch VRRP between main and backup devices. The invention can select switch time accurately, and avoid service interruption.

The invention relates to the field of communication technology and discloses a method and a system achieving network redundancy and data flow seamless switching. The method includes the following steps of using a virtual router redundancy protocol (VTRP) to trigger switching of a first transmitting device to a second switching device according to the changes of links, and using an open shortest path first (OSPF) interior gateway protocol to update route information and to switch the flow direction of the data flow. Main and standby switching is achieved through the use of the VRRP, and when the main and standby states of a VRRP group switch, and the OSPF interior gateway protocol is used for updating the route information and switching the flow direction of the data flow, so that after a linkage mechanism of the VRRP and the OSPF interior gateway protocol is used for achieving the switch, the route information is timely updated, the problem that the data flow direction is wrong and therefore the use of a user is affected is avoided, and the data flow seamless switching is ensured.

The invention discloses a method and a device used for synchronous ARP (Address Resolution Protocol) list item of a virtual router redundancy protocol backup set. In the invention, a Master member device is capable of imitating a local host to realize ARP spoofing for a Backup member device, and the Backup member device is promoted to carry out ARP learning through the ARP spoofing of the Backup member device, so that the Backup member device and the Master member device can establish ARP list item synchronously. Therefore, while the ARP list item is realized synchronously, the improvement of announce message for virtual router redundancy protocol is not required, and dependence on the support of network management is not required.

The invention discloses a method for synchronizing address resolution protocol (ARP) tables between master and slave virtual router redundancy protocol (VRRP) devices and a VRRP device. The method comprises the following steps: after ARP tables in three layers of examples or three layers of virtual private networks (L3VPN) corresponding to a VRRP protection group are packaged into a message by the master VRRP device, the message is transmitted to the slave VRRP device; the received message is analyzed by the slave VRRP device, and the carried ARP table is loaded on the ARP table corresponding to the locality. The VRRB device comprises an ARP table message generating module, an ARP table message transmitting module, an ARP table message analyzing module and an ARP table loading module. After adopting the method provided by the invention, the ARP tables between the master and slave VRRP devices are synchronous through the ARP table information message and are supported on the master and slave VRRP devices, and the method has no additional requirement about an access loop device.

The invention discloses an environmental-friendly accessing method which comprises the following steps: forwarding only the message on the third layer by a convergence ring, forwarding only the message on the second layer by an access ring, and configuring dual gateways uplinked to a core node, wherein each access node of the access ring takes two convergence nodes as primary and standby gateways. The invention also discloses an environmental-friendly accessing network. Because the hardware in the access layer forwards the message on the second layer, no software needs to be started for learning routing. In addition, because the static primary and standby routing technology is used, the convergence time can be shortened, the fault-tolerant ability can be improved, the defect that virtual router redundancy protocol (VRRP) is used for backing up the primary gateway on two sides can be avoided. The invention can avoid the oscillation of the address resolution protocol (ARP) of the gateway, improve the stability of the system and save the resource of the central processing unit (CPU).

A method for realizing multicast service includes configuring one or multiple VRRP group, binding any one of multicast group with any one of VRRP group, sending received multicast data message and multicast protocol message generated by itself to multicast receiving device by router in VRRP group according to assigned VRRP state.

A method for implementing Virtual Router Redundancy Protocol (VRRP) on a Resilient Packet Ring (RPR), including: setting an interface supporting a plurality of Medium Access Control (MAC) addresses for each RPR interface of network devices to constitute VRRP groups; classifying the RPR interfaces of network devices to constitute VRRP groups, and the interfaces supporting a plurality of MAC addresses, into one virtual local area network (VLAN); running the VRRP in the classified VLAN to generate at least one virtual layer 3 switch device. Also, the present invention discloses a system for implementing VRRP on an RPR. In the method and system of the present invention, a plurality of virtual layer 3 switch devices are generated by means of setting a VE interface in the network device and running the VRRP in the VLAN which contains both the VE interface and the RPR interface.

Embodiments of the present invention provide a route update method, which includes: receiving a first route message issued by a first router indicating that a route can reach a first destination, wherein the first route message includes a first route priority; receiving a second route message issued by a second router indicating that a route can reach the first destination, wherein the second route message includes a second route priority; selecting the route corresponding to a higher route priority between the first route priority and the second route priority as a forwarding route, wherein,the first router and the second router compose a router backup group through Virtual Router Redundancy Protocol (VRRP), when the first router is a primary router and the second router is a backup router, the first route priority is higher than the second route priority. Furthermore, embodiments of the present invention also provide a corresponding router. The route update method and the router supposed by the embodiments of the present invention can ensure that the Provider Edge (PE) equipments can promptly perceive failures between remote PE equipments and the Customer Edge (CE) equipments connected with the remote PE equipments.

The embodiment of the invention provides a data transmission method and a network system. The data transmission method comprises the steps that first access network equipment detects and knows that a first link between the first access network equipment and a first router, or the first router goes wrong, a working link for transmitting data is switched from the first link to a second link serving as a protective link currently, and the second link is between second access network equipment and a second router; the first access network equipment transmits the data to the second access network equipment, and transmits the data to a network side through the second link serving as the protective link currently; and the same VRID (virtual router identification) and virtual router redundancy protocols with the same virtual IP (Internet protocol) are configured on the first router and the second router, the virtual router redundancy protocols do not conduct master and slave selection, and the second router has a data forwarding function initially. The data transmission method and the network system can shorten interrupting time of a flow.

The invention provides VRRP access method, device and system, as well as a VRRP routing equipment. The VRRP access method comprises the following steps of: monitoring the communication of links among all servers in a local network by the VRRP routing equipment in a main control state; if the links are normal, transmitting a host router of the servers to the routing equipment in an external equipment; and if the links have failure, transmitting a first informing message for canceling the host router of the servers to the routing equipment in the external network. The VRRP access method, device and system, as well as the VRRP routing equipment, ensure the reliability when the servers are accessed into the external network on the basis of link communication and improve the access quality.

A method and apparatus adapting a Virtual Router Redundancy Protocol (VRRP) between a set of physical SEGs that realize a V-SEG function towards a remote IPsec / IKE peer. In tandem with the VRRP, a new protocol, referred to herein as the IPsec / IKE SA Transfer Protocol (SATP), is introduced to exchange IKE and IPsec SA information between VRRP capable SEGs. SATP synchronizes all participating SEGs with respect to dynamic IPsec state information in near real time. Thus, in the event of a master VRRP SEG failure, one of the hot-standby SEGs takes over the V-SEG function. This allows the V-SEG function to remain functional despite the possible failure of one or more participating SEGs.

The invention provides a method and system for connecting users by virtual router redundant protocol (VRRP), belonging to communication technical field. And it provides a method for connecting users by VRRP, comprising the steps of: establishing a VRRP instance; main router sends free ARP messages at regular time and VRRP responds to terminal's ARP request; and it also provides a system for connecting users by VRRP, comprising router, switcher and terminal. And it saves VRRP resources and router hardware resources, reduces waste of IP addresses, increases number of connected users and all users are configured with only one default gateway.

The invention provides a virtual router redundancy protocol (VRRP) message transmitting method, comprising: setting transmit-receive attributes for all interfaces on network equipment, where the attributes of the interfaces on the network equipment, connected with VRRP router, are set into 'allow to transmit-receive VRRP messages', and those of the others are set into 'prohibit receiving VRRP messages'; after the network equipment receives VRRP messages from its own interfaces, it processes the received VRRP messages according to the set interface attributes. In addition, the invention provides a VRRP message transmitting device. And the invention can improve VRRP protocol safety, assure normal user data transmission, and avoid user flow interrupt and other abnormal conditions from occurring. Further, the invention can reduce network resources occupied by VRRP messages and improve the whole network performance.

The embodiment of the invention relates to a message processing method, access equipment and a communication system. In the message processing method, the access equipment receives a network-side multicasting message through a first network port of the access equipment; the access equipment identifies the protocol type of the multicasting message; if the identified multicasting message is a virtual router redundancy protocol (VRRP) message, the virtual router redundancy protocol message is sent to a network side through a second network port of the access equipment according to an interception port list used for transmitting the virtual router redundancy protocol message; and if the identified multicasting message is a non-virtual router redundancy protocol message, the non-virtual router redundancy protocol message is sent to a user side through a user port of the access equipment. The embodiment of the invention can prevent the access equipment from broadcasting the VRRP message to all users so as to save the network bandwidth, and prevent the users from attacking a router by intercepting the VRRP message and constructing a VRRP message with high priority level so as to enhance the network safety and ensure the normal operation of services.

The invention discloses a dual homing protection method. The method comprises the following steps of: when main equipment of the VRRP monitors an uplink failure, carrying out main / standby switching of a VRRP (Virtual Router Redundancy Protocol) and notifying downlink equipment to carry out switching in an MPLS-TP (Multiple protocol Label Switching-Transport Profile) network; when a link switching appears in the MPLS-TP network, informing the previous main equipment of VRRP by the switched main equipment to carry out the corresponding main / standby switching. Based on the same invention concept, the invention further provides equipment to solve the problems that forward and backward paths are not identical and a link is impassable when an access link breaks down.