51 results about "Virtual Switching Instance" patented technology

The present disclosure provides hybrid packet-optical private network systems and methods for a private and dedicated multi-point Ethernet Private Local Area Network (EPLAN). The network systems and methods include a Layer 1 infrastructure service with the inclusion of reserved, dedicated packet switch capacity upon which clients can build their personal, private packet networks. In the systems and methods described herein, packet networking methods are not used to partition the isolated LAN connectivity. Instead, dedicated Ethernet Private LANs (EPLs) are defined between dedicated virtual switching instances (VSIs) that are defined, as necessary, within larger packet-optical switches. Each VSI is partitioned from the remainder of its packet switch fabric as a dedicated, private resource for a specific EPLAN. A packet network is then built by the customer on top of the private EPLAN bandwidth and operated as an isolated, private network with no influence by other carrier's network resources.

Methods and apparatuses are disclosed for interworking a first protocol, e.g., Provider Backbone Bridge Traffic Engineering (PBB-TE), that provides Ethernet carrier-class traffic engineering, with a second protocol, e.g., Virtual Private LAN Service, that emulates local area network (LAN) service. Unicast, multicast, and broadcast transmissions are enabled across an Ethernet aggregation network and an MPLS core network. Dual homing protection and end-to-end traffic engineering with adjustable granularity are also provided. These capabilities are not available with traditional PBB-TE networks or with an interworking between PBB and VPLS that has been previously proposed. Embodiments of the invention terminate a PBB-TE tunnel at a user-facing provider edge (UPE) node and attach instance service identifiers (ISIDs) to different virtual switching instances (VSI)s. As a result, inexpensive Ethernet-only aggregation networks can be designed to interoperate with VPLS with increased reliability and control, benefiting service providers and end users.

The invention discloses a method for realizing cross-VPN multicast, which comprises that: PE on a multicast source and PE on a customer are all provided with a virtual switch instance (VSI) of a VPN where the multicast source is positioned, and pseudo wire (PW) connection is established in the VSI; a multicast router sends an internet group management protocol (IGMP) general query message in the VPN where the multicast source is positioned, and uplink router port information of the VPN where the multicast source is positioned is respectively formed in the PE on the multicast source and the PE on the customer; the PE on the customer and the PE on the multicast source maintain a local multicast member relation table respectively according to sensed multicast information carried in an IGMP protocol message initiated by a user in a VPN where a non-multicast source is positioned; and when receiving multicast data streams, the PE on the multicast source and the PE on the customer retrieve the locally stored multicast member relation table respectively according to the VPN ID where the multicast source is positioned and a multicast MAC address, and then forward the multicast data streams through downlink outgoing interfaces of retrieved entries.

A method for switching end to end pseudoline artificial virtual leased line in to virtual special network includes setting multiple global unique pseudoline ID in virtual exchange example according to pseudoline ID of end to end psudoline artificial virtual leased line requiring to be switched-in, obtaining pseudoline ID corresponding to said virtual exchange example by end to end pseudoline artificial virtual leased line through matching and seeking then switching in said virtual exchange example. The system used for realizing said method is also disclosed.

The invention provides a method and a device for flow switching in virtual private local area network service (VPLS) network, wherein a master pseudo-wire (PW) and a backup PW connected with user-oriented provider edge equipment (UPE) are disposed in the VPLS network. The method comprises: adding virtual switching instances (VSI) adopting the same master and backup PWs into a fast switching group in advance and respectively establishing forwarding table entries pointing to the master and backup PWs for each VSI; when the master PW in the fast switching group normally operates, controlling each VSI in the fast switching group to forward a message by the forwarding table entry pointing to the master PW; and when detecting that the master PW fails, controlling each VSI in the fast switching group to forward the message by the forwarding table entry pointing to the backup PW. The invention can largely shorten time for flow switching and ensure carrier-grade fast switching time of 50ms.

The invention provides a message forwarding method, system and device for an H-VPLS (Hierarchical Virtual Private local area network service). A user side operator edge device (UPE) is configured to establish an MAC (media access control) forwarding table by performing MAC address learning only on a message from a local client edge device (CE) side, a network side operator edge device (NPE) is configured to enable a source filtering function to any message in a default mode; after receiving the message from the local CE side, if determining that the message is a unicast message and a destination MAC address of the message cannot be found in the local MAC forwarding table, the UPE only forwards the message to the NPE corresponding to virtual switching instance (VSI) to which the message belongs, and notifies the NPE to close the source filtering function on the massage. The message forwarding method provided by the invention can reduce the redundancy broadcast traffic in the message forwarding process caused by less MAC address space of the UPE.

The invention discloses a virtual private LAN service (VPLS) message processing method and a VPLS message processing device, and relates to the field of network technologies, for solving the problems that in existing VPLS networking adopting a virtual network function (VNF) technology, VPLS forwarding traffic detours and traffic forwarding performance is poor due to the fact that multiple virtual machines (VM) share one virtual switching instance (VSI). According to the method, one VSI is arranged on each forwarding plane VM; and the method comprises the steps of receiving a message comprising a MAC address of a first user and a MAC address of a second user sent by the first user by using the first forwarding plane VM, querying a MAC forwarding table, acquiring a first interface corresponding to the MAC address of the second user in the MAC forwarding table, encapsulating a first private network label and a first public network tunnel label in the message, encapsulating a MAC address of the first interface and a MAC address of an interface of a first opposite terminal in the encapsulated message to form a VPLS message, and sending the encapsulated VPLS message out via the first interface.

The invention discloses a method and a device for transmitting multicast method, wherein the method comprises the following steps: determining a multicast virtual switching instance (VSI) corresponding to user information according to the user information carried in joint requests after receiving the joint requests sent by a user; determining user information of all joint requests managed by the multicast VSI according to a transmission list, and transmitting the multicast data from the multicast VSI to all users required to joint according to the information of the users required to joint, wherein the transmission list is used for recording a corresponding relation of the multicast VSI and the information of all users required to joint. The invention achieves the purposes of saving network bandwidth and reducing the quantity of protocol messages.

The present disclosure provides hybrid packet-optical private network systems and methods for a private and dedicated multi-point Ethernet Private Local Area Network (EPLAN). The network systems and methods include a Layer 1 infrastructure service with the inclusion of reserved, dedicated packet switch capacity upon which clients can build their personal, private packet networks. In the systems and methods described herein, packet networking methods are not used to partition the isolated LAN connectivity. Instead, dedicated Ethernet Private LANs (EPLs) are defined between dedicated virtual switching instances (VSIs) that are defined, as necessary, within larger packet-optical switches. Each VSI is partitioned from the remainder of its packet switch fabric as a dedicated, private resource for a specific EPLAN. A packet network is then built by the customer on top of the private EPLAN bandwidth and operated as an isolated, private network with no influence by other carrier's network resources.

Methods and apparatuses are disclosed for interworking a first protocol, e.g., Provider Backbone Bridge Traffic Engineering (PBB-TE), that provides Ethernet carrier-class traffic engineering, with a second protocol, e.g., Virtual Private LAN Service, that emulates local area network (LAN) service. Unicast, multicast, and broadcast transmissions are enabled across an Ethernet aggregation network and an MPLS core network. Dual homing protection and end-to-end traffic engineering with adjustable granularity are also provided. These capabilities are not available with traditional PBB-TE networks or with an interworking between PBB and VPLS that has been previously proposed. Embodiments of the invention terminate a PBB-TE tunnel at a user-facing provider edge (UPE) node and attach instance service identifiers (ISIDs) to different virtual switching instances (VSI)s. As a result, inexpensive Ethernet-only aggregation networks can be designed to interoperate with VPLS with increased reliability and control, benefiting service providers and end users.

The invention relates to a report transfer method of virtual special local network and relative device. Wherein, said method comprises: setting report transfer device in the virtual special local network, which comprises at least one share virtual exchanger; setting the members of said exchanger, while the member is several virtual exchangers of virtual special local network; when the user of virtual special local network sends request, it will be transferred by the report transfer device. The invention sets the share virtual exchanger, starts the Arp proxy function and builds three layers of logic interface to complete the external network access of different virtual exchangers in virtual special local network, without building many virtual exchangers at the edge device of operator, to simplify the setting and management of virtual special local network. Therefore, user can easily access external network, or be insulated.

The invention provides a transmission method and a system for a layered virtual private local area network business. The method comprises the following steps: a user-facing provider edge (UPE) router is interlinked with a network provider edge (NPE) router, and the network does not support the transmission function of a multi protocol label switch (MPLS) and a stacked VLAN (QINQ) technology, wherein every UPE is configured with an Ethernet network everything over IP (EoIP) channel connected with an NPE, and virtual exchange cases are hung under the NPE, wherein the method comprises the steps that: the NPE obtains the targeted media access control (MAC) address sent by the UPE as a first data packet of the MAC address of the device hung under the NPE; the NPE sends the first data packet; after receiving a second data packet fed back to the first data packet by the device, the NPE sends the second data packet to the UPE through the EoIP channel.

Provided herein a network virtualization apparatus and method, the apparatus including a tunnel manager configured to collect tunnel end points information within a network, and to connect each tunnel end point with a tunnel based on the tunnel end point information collected; a tunnel packet end point configured to receive a tunnel packet and process the packet such that an L2 switching may be performed, and to transmit the packet to a domain VSI (virtual switching instance); the domain VSI configured to perform the L2 switching on the processed packet, and to transmit the packet to a tunnel packet generator; and the tunnel packet generator configured to add a tunnel header to the packet for which the L2 switching has been performed to generate a new tunnel packet, and to transmit the new tunnel packet.

The invention provides a forwarding table updating method and device, and the method comprises the steps: enabling PE equipment to obtain an Ethernet segment identifier ESI and a media access controlMAC address carried in a message forwarded through an interface of the ESI identifier from at least one piece of opposite-end PE equipment; recording a corresponding relation among the VSI, the ESI and the outgoing interface information in a forwarding table based on the acquired ESI, the acquired MAC address, the virtual switching instance VSI corresponding to each MAC address and the outgoing interface information; if it is detected that the message forwarding path between the PE equipment and the opposite-end user edge CE device breaks down, adjusting outlet interface information corresponding to the ESI associated with the broken-down message forwarding path in the corresponding relation, wherein the opposite-end CE device is connected with the PE equipment through the at least one opposite-end PE equipment. Therefore, the forwarding table can be updated quickly, and quick switching of message forwarding paths is realized.

The invention discloses a method for carrying out MAC (Media Access Control) address learning based on software and hardware coordination in VPLS (Virtual Private Lan Service). The method comprises the steps of receiving a message and analyzing the message to obtain a source MAC address and a virtual exchange instance to which the source MAC address belongs; if an address learning request access MAC address table exists, obtaining entry information in the MAC address table, and arbitrating pre-learning entry information and the entry information in the MAC address table; if MAC address authentication is started, updating an entry state to be pre-authentication and updating an aging period to be 1 / 2 of a preset aging period and arbitrating a link table length state; if the MAC address authentication is not started, updating the entry state to be authentication success and updating the aging period to be the preset aging period; and if the address learning request does not exist and a CPU request access MAC address table exists, when the entry state is valid and the entry information matches, performing corresponding operation on a pre-authentication entry state. According to the method, a great number of legal MAC addresses are prevented from being faked by an attacker to occupy normal MAC address table resources for a long time and the load of the CPU is prevented being too heavy, thereby maintaining the normal operation of a network and other business.

The invention relates to a method for improving the network reliability of VPLS client device and a relative device, wherein said method uses virtual exchanger to detect the TCN report; when the virtual exchanger receives the TCN BPDU report, clearing the MAC address list of said exchanger and the MAC address list of relative virtual exchanger. Since the inventive VPLS can detect BPDU TCN report at any time, when one chain is cut off in network, the network can build new connection on time, and send BPDU TCN report to the virtual exchanger, and the virtual exchange receives said report and refresh the MAC address list on time; therefore, the sent report will not be lost, to reduce the interrupt time between CE, and improve the network transmission reliability.

The invention discloses a method, a module, equipment and a system for message processing in a virtual private local area network service network and belongs to the field of communication. The method includes: receiving an Ethernet message sent by CE (customer edge) equipment and determining a VSI (virtual switching instance) of the Ethernet message; judging whether output interfaces of the VSI include one output interface to correspond to a target MAC (media access control) address in the Ethernet message or not; when no output interface corresponds to the target MAC address in the Ethernet message, packaging the Ethernet message into a multicast data message, and sending the multicast data message to an IPv4 (internet protocol version 4) multicast address corresponding to the VSI, so that the multicast data message is sent to PE (provider edge) equipment where a member of a multicast group with the IPv4 multicast address located. By the method, an unknown unicast message is packaged to the multicast data message which is sent to the specific IPv4 multicast address, and accordingly the multicast data message is sent to the member of the multicast group with the IPv4 multicast address, and the bandwidth of the VPLS (virtual private LAN service) network is effectively saved.

The embodiment of the invention discloses a fault processing method, a device and a system for a virtual private local area network, relates to the technical field of network communication, in order to solve the problem of bandwidth waste of a VPLS (Virtual Private Local Area Network Service) network, caused by that the CE connected at the other end of the IVSI still transmits data to the VPLS network when a CE (Customer Edge) connected at one end of an IVSI (Instance Component Virtual Private Instance) can not access to a network. The fault processing method comprises the following steps: a relay virtual private instance sends fault notice information to a backbone component virtual private instance at an opposite terminal, wherein the fault notice information carries the instance component virtual private instance at a home terminal and an instance tag shared with the instance component virtual private instance at the opposite terminal; and the backbone component virtual private instance at the opposite terminal receives the fault notice information, and the instance component virtual private instance at the opposite terminal is closed according to the instance tag carried by the fault notice information.

The invention relates to a layering virtual network based on a tree virtual local area network (VLAN). The layering virtual network comprises a core website and an edge node, wherein the edge node is provided with a virtual switching instance which is provided with at least more than one user logic interface and at least more than one pseudowire. The invention also provides a configuration method of the layering virtual network based on the tree VLAN, comprising the following steps: (1) establishing a fully-meshed virtual special switching instance on a core node; (2) establishing a tree VLAN instance on the edge node; and (3) relating the tree VLAN instance with the core node. The invention has the beneficial effects that operation is simple and visual; the configurations can be collocated in advance in accordance with a plan; the problem that configuration parameters are input wrongly does not occur; addition / cancellation of the services is realized by only adding / cancelling a user logic port in the tree VLAN; and other related function expansion can be easily realized.

The invention relates to a pseudo-wire labeling method for an MPLS (Multiple Protocol Label Switching) network virtual exchange embodiment and a chip processing method for the pseudo-wire labeling method for the MPLS network virtual exchange embodiment. A configuration process in a double-layer virtual private network comprises the following steps: (1) establishing a virtual exchange embodiment and appointing an entry pseudo-wire label; (2) adding a network-side logic port in the virtual exchange embodiment, appointing an exit pseudo-wire label and an exit tunnel label as well as an entry tunnel label, and configuring attributions of the network-side logic port; and (3) adding a user-side logic port in the virtual exchange embodiment and configuring attributions of the user-side logic port, wherein the user-side logic port comprises a physical port and a virtual local area network identification. The chip processing method comprises the following steps: maintaining a double-layer address table of the virtual exchange embodiment of the double-layer virtual private network according to the message, and then performing service forwarding according to a target logic port acquired from the double-layer address table.

The invention relates to a virtual special local area network service technology and discloses a service message flow speed-limiting method and device for a virtual special local area network. The technical scheme is that the method comprises a step (A) of setting whether to carry out a virtual private lan service (VPLS) flow speed-limiting strategy of an output interface for transmitting VPLS messages when a virtual exchange example transmits the VPLS messages during virtual exchange example configuration; a step (B) of carrying out a step (C) if the virtual exchange example carries out the VPLS flow speed-limiting strategy of the output interface for transmitting VPLS messages when the virtual exchange example transmits the VPLS messages, or else directly transmitting the VPLS messages and ending the flow; the step (C) of judging whether the VPLS message transmitting flow of the output interface for transmitting the VPLS messages meets the speed-limiting requirements of the VPLS flow speed-limiting strategy, discarding the VPLS messages if the VPLS message transmitting flow of the output interface for transmitting the VPLS messages meets the speed-limiting requirements, or else transmitting the VPLS messages. The service message flow speed-limiting method and device are used for virtual special local area network service message transmission, and band width resources can be utilized to the largest extent.

The invention provides a message forwarding method and device. The method comprises the following steps: recording a flow switching flow table entry in an effective state written by a controller in a flow table; wherein a matching domain field of the flow switching flow table entry is a DR interface, and an instruction field of the flow switching flow table entry is sent through a VXLAN tunnel connected with neighbor distributed elastic DR equipment; searching an MAC address table item matched with a destination MAC address of the Ethernet data message to be forwarded in an MAC address table of the virtual exchange instance; searching an output port of an access link of the MAC address table entry as a local DR interface; and matching a flow switching flow table item based on the local DR interface in the flow table, packaging the Ethernet data message to be forwarded according to the packaging information of the VXLAN tunnel, and sending the Ethernet data message to the neighbor DR equipment through an output port of the VXLAN tunnel.