VxLAN EVPN MAC Learning Limit Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There are no known methods to implement Media Access Control (MAC) learning limits on EVPN multi-homed access ports, particularly in VxLAN Ethernet access ports, which leads to difficulties in independently enforcing MAC address learning limits across multiple VTEPs within the same Ethernet segment.
Innovation Solution
The MP-BGP EVPN protocol is modified to introduce MLL MAC delete notifications and MLL ES shutdown notifications, allowing for the enforcement of MAC address learning limits by designating a master VTEP to prioritize and manage MAC addresses across VTEPs, ensuring compliance with configured limits and preventing MLL violations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If MAC learning limits are independently enforced on each VTEP in an EVPN multi-homed access port, then security control is improved, but different sets of MAC addresses will be present in different VTEPs leading to network inconsistency
Solution Approach 1:
The patent merges the MAC learning limit enforcement across multiple VTEPs by introducing a shared MAC address table and unified limit management mechanism. Instead of independently enforcing limits on each VTEP, the system combines the MAC address tables of all VTEPs in the Ethernet segment and applies a single unified MAC learning limit, ensuring consistency while maintaining security control.
2Adaptability or versatility
If MAC learning limits are not enforced on EVPN multi-homed access ports, then network scalability and redundancy are maintained, but security control and MAC address learning limits cannot be enforced
Solution Approach 1:
The patent implements a universal MAC learning limit enforcement mechanism that works across all VTEPs in an EVPN multi-homed access port configuration. The system provides both security control through MAC limit enforcement and network scalability through the ability to handle multiple VTEPs with a unified approach, making the solution applicable to various network topologies.
3Stability of the object's composition
If a unified MAC learning limit is enforced across all VTEPs in an Ethernet segment, then MAC address set consistency is improved, but the complexity of managing MAC addresses across multiple VTEPs increases
Solution Approach 1:
The patent introduces an intermediary mechanism in the form of a unified MAC address table and control logic that mediates between multiple VTEPs. This intermediary structure consolidates MAC address management by creating a single shared table that all VTEPs access, simplifying the management complexity while ensuring consistency across the distributed VTEP infrastructure.
Data Source
AI summary
Systems and methods for enforcing media access control (MAC) learning limits (MLLs) on multi-homed access ports comprise configuring MLL violation actions to be performed by a virtual extensible local area network (VxLAN) tunnel endpoint (VTEP). The VTEP is multi-homed to VTEPs and comprises an Ethernet segment (ES) access port. A BGP EVPN or similar protocol may be used to communicate MLL information across VTEPs participating in the multi-homed ES to keep MACs and MLL violation actions consistent. The violation actions may comprise initiating a shutdown message to shut down an ES. Once an MLL violation associated with a MAC that has been received at the VTEP is detected, the VTEP may enforce the MLL by performing one or more of the configured MLL violation actions and propagate the same to other VTEPs.