VPN Route Importing via ERT-IRT Matching to Prevent Loops
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mechanisms for route interworking between local and remote VPN instances in EVPN networks face challenges such as complex service logic, compromised security, and increased risk of loops and faults due to extensive configuration of paired ERTs and IRTs, limiting application scenarios.
Innovation Solution
A method for importing routing information between VPN instances using attribute matching and ERT/IRT matching to simplify configurations and ensure isolation, avoiding loops and faults, allowing interworking without extensive paired configurations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If route cross is implemented between local VPN instances, then route interworking is achieved, but service logic and configurations become complex due to extensive paired ERTs and IRTs
Solution Approach 1:
The patent extracts the route importing function from the complex paired ERT-IRT configuration mechanism. By introducing a dedicated route importing module that operates independently from the traditional route cross mechanism, the system separates the route interworking function from the complex configuration requirements, thereby simplifying service logic while maintaining route interworking capability
Solution Approach 2:
The patent introduces an intermediary route importing module that mediates between different VPN instances. This module uses simplified import route targets (IRTs) to facilitate route importing without requiring extensive paired ERT-IRT configurations, thus reducing configuration complexity while enabling route interworking
2Adaptability or versatility
If extensive paired ERTs and IRTs are configured for remote cross, then mutual access of VPN instances is achieved, but service security is compromised and loops may occur
Solution Approach 1:
The patent implements a self-service mechanism where the route importing module automatically manages route importing between VPN instances using simplified IRTs. This eliminates the need for manual paired ERT-IRT configurations that compromise security, while maintaining mutual access capability through automated, controlled route importing with built-in security checks
Solution Approach 2:
The patent introduces feedback mechanisms in the route importing process that monitor and control route importing operations. The system provides feedback on route importing status and security conditions, enabling dynamic adjustment of route importing to prevent loops and maintain service security while preserving VPN instance mutual access
3Reliability
If paired ERTs and IRTs are extensively configured, then route interworking is achieved, but the risk of loops and faults increases
Solution Approach 1:
The patent extracts the route interworking function from the harmful paired ERT-IRT configuration mechanism. By implementing a separate route importing module that uses simplified IRTs, the system achieves route interworking without the configuration complexity that leads to loops and faults
Solution Approach 2:
The route importing module acts as an intermediary that controls route importing between VPN instances using simplified configurations. This intermediary mechanism prevents the formation of routing loops and faults by implementing controlled, monitored route importing without the extensive paired configurations that cause such issues
Data Source
AI summary
A route importing method includes after importing first routing information of a first VPN instance in a second network device from a first VPN instance to a second VPN instance in a first network device, the first network device imports the first routing information from the second VPN instance to a third VPN instance in the first network device, rather than separately importing the routing information of the first VPN instance from the first VPN instance to the second VPN instance and the third VPN instance.