Layer 2 Switch Virtual VLAN Identifier Assignment
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing VLAN identifier assignment methods lead to undesirable flooding of traffic and bandwidth wastage when different networks connected to the same layer 2 switch use the same VLAN identifiers, limiting flexible VLAN assignment and requiring cumbersome solutions like access lists or VMAN identifiers.
Innovation Solution
The method involves classifying each layer 2 frame with a VLAN identifier and port identifier to determine a virtual switch identifier, allowing flexible VLAN assignment and segregating traffic on a per-virtual-switch basis, reducing lookup table size and memory requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If different networks use the same VLAN identifier, then flexible VLAN assignment is achieved, but traffic flooding and bandwidth wastage occur
Solution Approach 1:
The patent segments the VLAN identification space by introducing a network identifier that combines with VLAN identifier to form a composite key. This segmentation allows different networks to use overlapping VLAN identifiers without causing traffic flooding, as each network's traffic is uniquely identified by the combination of network identifier and VLAN identifier.
Solution Approach 2:
The network identifier acts as an intermediary layer between the physical network connection and the VLAN identifier. This intermediary enables flexible VLAN assignment within each network while preventing unauthorized traffic flooding across networks, as the switch uses the combined network identifier-VLAN identifier to determine proper traffic handling.
2Reliability
If separate VLAN identifiers are assigned to different networks, then traffic flooding is prevented, but VLAN assignment flexibility is limited
Solution Approach 1:
The patent adds another dimension to VLAN identification by introducing the network identifier as a separate dimension. Instead of relying solely on VLAN identifier uniqueness across all networks, the system now uses a two-dimensional identification space (network identifier, VLAN identifier), which provides both traffic isolation and assignment flexibility.
Solution Approach 2:
The system changes the identification parameters from a single VLAN identifier to a composite key consisting of network identifier and VLAN identifier. This parameter change allows networks to freely assign VLAN identifiers within their own network while maintaining proper traffic isolation through the network identifier component.
3Reliability
If access lists are used to control traffic forwarding, then traffic segregation is achieved, but device complexity and configuration burden increase
Solution Approach 1:
The system enables self-service traffic segregation by automatically assigning network identifiers to networks and allowing each network to independently manage its own VLAN identifiers. The switch automatically handles traffic segregation based on the composite network identifier-VLAN identifier, eliminating the need for manual access list configuration and reducing device complexity.
Data Source
AI summary
Methods and systems for selectively processing VLAN traffic from different networks while allowing flexible VLAN identifier assignment are disclosed. According to one aspect, a layer 2 switch includes a virtual switch identifier data structure that associates a VLAN identifier extracted from a layer 2 frame and a port identifier corresponding to a port on which a frame is received with a virtual switch identifier. The virtual switch identifier is used to select a per-virtual-switch data structure, such as a forwarding table. The per-virtual-switch data structure is used to control processing of the layer 2 frame on a per-virtual-switch basis. The per-virtual-switch data structure may also be updated separately from the data structures assigned to other virtual switches.