Scalable Physical Loop Detection in Non-Native VLANs

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for detecting physical loops in non-native Virtual Local Area Networks (VLANs) are not scalable and fail to detect loops effectively, as they require transmitting loop-guard packets in each VLAN broadcast domain, which becomes inefficient with a large number of VLANs.

Innovation Solution

A scalable approach that utilizes MAC address movement (MAC move events) as an indicator of physical loops, configuring network chips to monitor MAC move events across multiple interfaces and determining if the event count exceeds a threshold within a given time frame to identify and address physical loops in non-native VLANs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If loop-guard packets are transmitted in each VLAN broadcast domain, then loop detection capability is improved, but system complexity and resource consumption increase significantly with large number of VLANs

Engineering Contradiction:
Improveloop detection capabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent makes the network chip's MAC move detection capability serve multiple VLANs simultaneously. Instead of implementing separate loop-guard packet transmission for each VLAN, a single MAC move detection mechanism monitors all VLANs on an interface, making the detection system universal across multiple VLAN broadcast domains and eliminating the need for VLAN-specific detection instances.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent combines the loop detection function into the network chip's hardware MAC move detection capability. By merging loop detection with the existing MAC address monitoring function that tracks source MAC addresses of received packets, the system achieves loop detection across all VLANs using a unified hardware mechanism rather than separate software-based packet transmission for each VLAN.

Inventive Principle:
Principle #5Merging (Combining)

2Reliability

If loop-guard packets are transmitted in each VLAN broadcast domain, then loop detection capability is improved, but resource consumption increases with large number of VLANs

Engineering Contradiction:
Improveloop detection capabilityVSAvoidresource consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The network chip's MAC move detection capability is designed to monitor multiple VLANs simultaneously through a single unified mechanism. This universal detection approach allows the system to maintain loop detection capability across all VLANs without multiplying resource consumption by the number of VLANs, as the same hardware resources serve all VLAN broadcast domains.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The network chip's hardware automatically performs MAC move detection by monitoring source MAC addresses of received packets and generating detection events based on MAC address changes. This self-service mechanism eliminates the need for the CPU to transmit and process loop-guard packets for each VLAN, significantly reducing resource consumption while maintaining detection capability.

Inventive Principle:
Principle #25Self-service

3Productivity

If MAC move events are monitored across all VLANs using a unified mechanism, then scalability is improved, but detection precision for specific VLAN loops may be reduced

Engineering Contradiction:
ImprovescalabilityVSAvoiddetection precision
Core Design Contradiction:
ProductivityVSMeasurement precision

Solution Approach 1:

The patent segments the detection information by tracking MAC move events per interface while maintaining the ability to associate events with specific VLANs. The network chip monitors MAC moves on each interface and the system can analyze patterns to determine which VLAN is affected, thus segmenting the detection scope to maintain precision while using a unified scalable mechanism across all VLANs.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent adds the time dimension to detection by monitoring MAC move events over multiple consecutive time units. Instead of relying on single-point detection that may miss VLAN-specific loop characteristics, the system observes MAC move patterns across multiple time intervals, enabling it to distinguish genuine loop conditions from normal network activity while maintaining scalability across all VLANs.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS11870607B2Scalable physical loop detection in non-native virtual local area networks (VLANs)
Publication Date: 2024.01.09 FORTINET INC
  • US11870607B2 patent drawing
  • US11870607B2 patent drawing
  • US11870607B2 patent drawing

AI summary

Systems and methods for detecting physical loops in both native and non-native VLANs are provided. According to one embodiment, a processing resource of a network switch detects a physical loop in a non-native Virtual Local Area Network (VLAN) by configuring a set of one or more network chips (e.g., an ASIC) associated with an interface associated with the non-native VLAN of multiple interfaces of the network switch to provide an indication (e.g., a Media Access Control (MAC) address or a packet) regarding a MAC move event detected on the interface. Responsive to receipt of the indication, it is determined whether a number of MAC move events for the interface meets an event count threshold within each unit of time (e.g., one or more seconds) of multiple consecutive units of time. When the determination is affirmative, the existence of the physical loop is identified.