Platform Independent PVLAN Implementation via MAC Replication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing private VLAN (PVLAN) implementations are closely tied to specific hardware platforms, limiting their portability and flexibility, as they require manual configuration and dynamic MAC address learning only in the primary VLAN, which is not easily transferable to other platforms.

Innovation Solution

A method and apparatus that learns and replicates MAC addresses and port information in both primary and secondary VLANs, allowing for generic L2 switch implementation without hardware platform assumptions, enabling traffic direction between VLANs and secure communication within isolated VLANs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of manufacture

If PVLAN implementations use hardware-specific configurations and manual MAC address learning in primary VLAN only, then the implementation is platform-specific and hardware-tied, but the portability and flexibility to other platforms is reduced

Engineering Contradiction:
Improveimplementation simplicityVSAvoidplatform portability
Core Design Contradiction:
Ease of manufactureVSAdaptability or versatility

Solution Approach 1:

The patent implements a universal PVLAN solution that works across multiple hardware platforms by creating a platform-independent implementation. The system uses generic L2 switch capabilities rather than hardware-specific features, allowing the same PVLAN configuration to function on different switch platforms without modification.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent learns and replicates MAC addresses from the primary VLAN into secondary VLANs. This copying mechanism allows the system to maintain MAC address information across different VLAN contexts without requiring hardware-specific implementations, enabling portability across platforms.

Inventive Principle:
Principle #26Copying

2Device complexity

If MAC addresses are learned only in the primary VLAN, then the configuration is simpler, but the ability to implement PVLAN on generic L2 switches without hardware assumptions is limited

Engineering Contradiction:
Improveconfiguration complexityVSAvoidswitch compatibility
Core Design Contradiction:
Device complexityVSAdaptability or versatility

Solution Approach 1:

The system automatically learns MAC addresses in the primary VLAN and self-replicates them to secondary VLANs without requiring manual configuration. This self-service approach maintains simplicity while enabling broader switch compatibility, as the learning and replication process is automatic and platform-independent.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent implements automatic copying of MAC address information from primary VLAN to secondary VLANs. This copying mechanism enables generic L2 switch implementation without requiring hardware-specific assumptions, as the same copying logic can be applied across different switch platforms.

Inventive Principle:
Principle #26Copying

3Reliability

If manual configuration is used for PVLAN setup, then the implementation is more controllable, but the flexibility and ease of deployment to different platforms is reduced

Engineering Contradiction:
Improveconfiguration controlVSAvoiddeployment flexibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system performs automatic MAC address learning and replication without requiring manual configuration for each VLAN. This self-service capability maintains reliability through controlled learning processes while significantly improving deployment flexibility across different platforms and scenarios.

Inventive Principle:
Principle #25Self-service

4Productivity

If PVLAN is implemented with hardware-specific features, then the performance is optimized for that platform, but the ability to transfer to other platforms is reduced

Engineering Contradiction:
Improveplatform performanceVSAvoidplatform transferability
Core Design Contradiction:
ProductivityVSAdaptability or versatility

Solution Approach 1:

The patent implements a universal PVLAN solution that achieves acceptable performance across multiple hardware platforms by using generic L2 switch capabilities. Rather than optimizing for a single platform, the system is designed to function efficiently on various switch types, balancing performance with broad transferability.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS7808992B2Platform independent implementation of private VLANS
Publication Date: 2010.10.05 CISCO TECHNOLOGY INC
  • US7808992B2 patent drawing
  • US7808992B2 patent drawing
  • US7808992B2 patent drawing

AI summary

A PVLAN having a primary and secondary VLAN's where the primary and secondary VLAN's have ports and the users connected to those ports. The MAC addresses of those users are learned in the primary or the secondary VLAN's and together with the port designation are stored preferably in tables associated with the VLAN's and the associated VLAN's. Processes are provided that replicate the tables in the other VLAN's so that the information necessary to transfer packets between source and destination ports is available to the associated VLAN's.