CN104009929B

CN104009929B - A kind of method and physical router managing virtual router

Info

Publication number: CN104009929B
Application number: CN201310055690.6A
Authority: CN
Inventors: 胡方伟; 孟建
Original assignee: ZTE Corp
Current assignee: ZTE Corp
Priority date: 2013-02-21
Filing date: 2013-02-21
Publication date: 2019-01-18
Anticipated expiration: 2033-02-21
Also published as: CN104009929A

Abstract

The invention discloses a method for managing a virtual router and a physical router. The method is applied to a physical router including a system control and a virtual router (LR); the method includes: a management plane domain process is built in the system control, and each LR A management process is built in: the management plane domain process exchanges information with the management process in each LR. The physical router includes: a system control and one or more virtual routers (LRs), including: a management plane process is built in the system control, and the management plane process is used to exchange information with the management process in each LR ; Each LR has a built-in management process, and the management process is used for information interaction with the management plane domain process. The present invention makes the management and operation and maintenance of the independent LR of the management plane more flexible. Furthermore, the present invention is not limited by software isolation or hardware isolation.

Description

A kind of method and physical router managing virtual router

Technical field

The present invention relates to network communication technology field more particularly to a kind of method for managing virtual router and physics routings Device.

Background technique

Virtual router (Virtual Router) is also known as router logic (Logical Router, referred to as LR), The functional simulation of physical router is realized in soft and hardware layer, to form multiple void in logic on a physical router Quasi- router, each virtual router individually runs respective Routing Protocol example, and has the I/O of oneself (Input/Output, input/output port) port, caching, address space, routing table, forwarding table and network management software.

Virtual router is generated to meet the needs of client, and Network integration, general may be implemented in virtual router Read the business such as verifying, virtual router lease.

Network integration refers to that virtual router passes through tunnel by the configuration of multiple virtual routers in a physical router It exchanges routing iinformation and forwards customer flow to other virtual routers, while passing through relevant physical interface or logic interfacing It exchanges routing iinformation and is used to other physical router (or configuring the virtual router in another physical router) forwardings Family flow.These virtual routers seem that just as individual physical router, only they all configure and operate in same On physical platform.

Proof of Concept function refers to for certain new technologies, due to the not overripened of technology and stablizes, directly in network Upper deployment may have a huge impact existing network, cause the unstable of business or even interrupt, and if taken in physics Virtual router functionality is enabled on business device, by new service deployment to virtual router, since virtual router has equipment Isolation characteristic, the new business configured on virtual router do not interfere with support of the physical router to existing business.

Router charter business, i.e., in enterprise user market, many enterprise customers be may not want that on purchase physics road It by putting into a large amount of time and money in terms of device, and is desirable to buy router services from its service provider, be supplied from service Acquisition password at quotient is answered, router is then managed according to oneself specific purpose by user.Service supplier is configured at physics road This demand that can satisfy user by the virtual router on device, reduces the equipment input cost of enterprise customer.

The producers such as Cisco and Juniper are proposed the virtual router implementation method of oneself at present.In the IOS of Cisco In (Internetwork Operating System, internet operating system) version, CRS-1 is routed by using distribution Processing board is at best able to support 8 SDR(Secure Domain Router, security domain router), wherein including a default Owner SDR.The control plane expansion platform JCS1200 of Juniper introduces PSD(Protected System Domains, Protect system domain) concept, PSD is also a kind of realization of virtual router.

The virtual router of the above Cisco and Juniper is essentially all a kind of virtual road based on hardware isolated By device technology.In the router logic of hardware isolated, main LR creates other LR and carries out resource division, each LR monopolize master control, The hardware resources such as line card, once distributing resource, each LR independence O&M, administrator needs to be connected respectively to it and manages mouth/string Eloquence, which can be carried out, logins management, and can not the alarm of intercommunication shared resource and the alarm of LR rank between each LR.

As shown in Figure 1, the router of a physics is divided into virtual router LR0 and LR1, it is wherein virtual based on LR0 Router.Each LR in this router is isolated based on software, and each virtual router has oneself independent process, address empty Between, routing table and forwarding table (depending on whether shared line card) etc., but infrastructure such as shared fan, power supply.Each LR is to veneer Degree of share can be different, veneer granularity can be arrived, logic interface granularity can also be arrived.Resource-sharing is to port/logic interface grade Not.

The LS system (Logical System, flogic system) of Juniper is realized based on protocol process isolation technology, Only routing associated process is isolated, isolation is lower.Its chain of command is completely shared, can not individually be managed to some LR Reason.

Summary of the invention

The invention proposes it is a kind of manage virtual router method and physical router, with overcome it is existing chain of command every From under the premise of can not flexible management LR defect.

To solve the above problems, being applied to include system control the present invention provides a kind of method for managing virtual router In the physical router of system and virtual router (LR)；Include:

It is built-in with chain of command domain process in the system control, is built-in with managing process in each LR:

Managing process in chain of command domain process and each LR carries out information exchange.

Further,

Managing process in chain of command domain process and each LR carries out information exchange, specifically includes:

When detecting that user logs in, managing process in main LR is to the current online LR of chain of command domain process requested Identification information；

The managing process of the main LR shows current online LR after the response for receiving the return of chain of command domain process Identification information；And after confirmation user has therefrom selected a LR, user is prompted to input username and password information；Confirming After user inputs, if judging, the username and password is correct, logins the LR of user's selection.

Further, the method also includes:

After the LR for logining user's selection, the managing process in the main LR is on the process registers of the chain of command domain Line notifies offline after user publishes.

Further, the method also includes:

The managing process of the main LR is after the response for receiving the return of chain of command domain process, if judging not having currently Have that LR is online, then directly prompt user inputs user name and password login enters the main LR.

Further,

It is controlled by the LR or system that alert and the alarm for needing intercommunication is distributed to chain of command domain process, by described Chain of command domain process determines the managing process that corresponding LR is transmitted to after coverage.

Further,

Chain of command domain process determines the coverage of the alarm according to resource allocation table.

Further,

Receive the managing process of the LR of the alarm by the alarm output to terminal, be logged by and send simple net Network management agreement trap.

Further,

The status information for each LR that chain of command domain process will acquire is sent to the managing process of main LR.

Further,

Managing process in the main LR by the main LR status query request initiated be sent to the chain of command domain into Journey；

After chain of command domain process receives the status query request, the status query request is sent to each LR；

Chain of command domain process gets the status information of each LR, specifically includes:

The chain of command domain receives the status information that each LR is returned after receiving the status query request.

Further,

Each LR periodically reports the status information of itself to the chain of command domain.

Correspondingly, the present invention provides a kind of physical router, include: system control and more than one virtual router (LR), comprising:

Be built-in with chain of command domain process in system control, chain of command domain process be used for the management in each LR into Cheng Jinhang information exchange；

Managing process is built-in in each LR, the managing process is used to carry out information exchange with chain of command domain process.

Further,

The managing process is used to carry out information exchange with chain of command domain process, specifically includes:

Managing process in main LR is used for when detecting that user logs in, currently online to chain of command domain process requested LR identification information；After the response for receiving the return of chain of command domain process, the identification information of current online LR is shown； And after confirmation user has therefrom selected a LR, user is prompted to input username and password information；It has been inputted in confirmation user Bi Hou, if judging, the username and password is correct, logins the LR of user's selection.

Further,

Managing process in the main LR is also used to after the LR for logining user's selection, to chain of command domain process It registers online, is notified after user publishes offline.

Further,

The managing process of the main LR is also used to after the response for receiving the return of chain of command domain process, if judging Online currently without LR, then directly prompt user inputs user name and password login enters the main LR.

Further,

Chain of command domain process is used to carry out information exchange with the managing process in each LR, specifically includes:

Chain of command domain process be used for receive the LR alerted or the system control send need intercommunication Alarm after, determine coverage and be transmitted to corresponding LR.

Further,

Chain of command domain process is used to determine the coverage of the alarm according to resource allocation table.

Further,

Managing process in the LR is used for after receiving the alarm, by the alarm output to terminal, charges to day Will simultaneously sends simple network management protocol trap.

Further,

The status information for each LR that chain of command domain process is used to will acquire is sent to the managing process of main LR.

Further,

Managing process in the main LR is used to the status query request that the main LR is initiated being sent to the chain of command Domain process；

Chain of command domain process is used for after receiving the status query request, sends the status inquiry to each LR Request；

The chain of command domain is for receiving the status information that each LR is returned after receiving the status query request.

Further,

Each LR is used to periodically report the status information of itself to the chain of command domain.

The present invention is based on chain of command isolation, login under conditions of not entering main LR is allowed to jump to other LR, and realize Alarm intercommunication between main LR and other LR can also be monitored the operating status of other LR, so that the independent LR of chain of command It is more flexible in management and O&M.In addition, the present invention is not only restricted to software isolation or hardware isolated.

Detailed description of the invention

Fig. 1 is virtual router architecture diagram in the prior art；

Fig. 2 is physical router structural framing figure in the embodiment of the present invention；

Fig. 3 is that LR logs in jump method flow chart in the embodiment of the present invention；

Fig. 4 alarm-monitor method flow diagram between LR in the embodiment of the present invention；

Fig. 5 is LR state monitoring method flow chart in the embodiment of the present invention.

Specific embodiment

To make the objectives, technical solutions, and advantages of the present invention clearer, below in conjunction with attached drawing to the present invention Embodiment be described in detail.It should be noted that in the absence of conflict, in the embodiment and embodiment in the application Feature can mutual any combination.

In the present embodiment, physical router system is made of system control and virtual router, and system control control is each The load operating of a virtual router simultaneously realizes the communication between virtual router.As shown in Fig. 2, being built-in with management in system control Face domain process, as the administrative center between LR；Managing process is equipped in each virtual router.In chain of command domain process and each LR Managing process constitutes a domain, and referred to as management domain, the chain of command domain process can be with the managing process of each LR in the management domain (such as telnet, order line, alarm process) interacts.It can realize that login across LR and main LR can be with using the mechanism Manage operating status and the fault warning etc. of other LR.Both it can guarantee chain of command isolation, and improved reliability and O&M safety, again Flexibility is taken into account, the managerial ability across LR is also enhanced.

In the present embodiment, the method logged in across LR, comprising: when detecting that user logs in, main LR is into management domain The identification information of the current online LR of chain of command domain process requested；After the response for receiving the return of chain of command domain process, if sentencing It is disconnected online currently without LR out, then it represents that LR is unallocated, and directly prompt user inputs user name at this time and password login enters master LR；Otherwise the identification information of the current online LR of display, and after confirmation user has therefrom selected a LR, it prompts user to input and uses Name in an account book and encrypted message, after confirming user's input, if judging, the username and password is correct, logins user choosing The LR selected, and online (i.e. managing process in the LR sends user to above-mentioned chain of command domain process to chain of command domain process registers Online notification message, to notify chain of command domain process user to log in the LR), it to be notified after publishing offline (i.e. in the LR Managing process sends user's offline notification message to above-mentioned chain of command domain process, to notify chain of command domain process user to exit The LR).

In the present embodiment, the method for intercommunication is alerted, comprising: the alarm of intercommunication will be needed to be distributed to by LR or system control Chain of command domain process is determined that being transmitted to corresponding LR after the coverage of the alarm is handled by chain of command domain process.

In the present embodiment, the method for status monitoring, comprising: inquiry is initiated by main LR or is periodically reported to pipe by other LR Reason face domain process is ok, and core is the centralized processing of chain of command domain process.

In the present embodiment, the prison to other virtual router operation conditions and failure can be realized by main virtual router Control, realization jump login function by main virtual router, facilitate user that virtual router is flexibly operated and managed, It is illustrated below with three specific embodiments.

As shown in figure 3, user manages the method that mouth logs on to other LR by main LR, comprising:

Step 301: user passes through telnet logging device, link setup success；

Step 302: the managing process in telnet logging device and main LR establishes TCP(Transmission at this time Control Protocol, transmission control protocol) it connects, the managing process in main LR controls chain of command domain process requested to system Obtain current online LR list；

Step 303: chain of command domain process returns to current online LR list, if list non-empty thens follow the steps 307, otherwise Continue to execute step 304；

Step 304: the login interface of main LR is logined in prompt；

Step 305: detecting that user inputs user name and password, and confirmation input username and password it is correct after, It performs the next step rapid；

Step 306: LR is become owner of in login, executes step 312；

Step 307: the information for the online LR that will acquire is shown to user and selects；

Step 308: after confirmation user has therefrom selected a LR, executing step 309；

Step 309: prompt login interface, instruction user input user name and password；

Step 310: detecting that user inputs user name and password, and confirmation input username and password it is correct after, It performs the next step rapid；

Step 311: logging in the LR of access customer selection；

Step 312: the chain of command domain process registration user into system control is online.

Step 313: terminating.

If user is already logged into main LR, other LR can also be jumped to by the above method, process is similar, herein no longer It is repeated.

According to coverage difference, the range showed is also different, it may be necessary to which the alarm of other LR is passed to LR0 for alarm (main LR) is presented；Or main LR shared resource is alerted to other LR and is noticed.The related alarm generated in system control is logical It crosses chain of command domain process and is advertised to the managing process of main LR and handled.Chain of command domain process is also the center of alarm control.Such as Shown in Fig. 4, main LR is alerted to the process transmitted to other LR, comprising:

Step 401: shared resource alarm occurs for main LR；

Step 402: by the shared resource alarm report to the managing process in main LR；

Step 403: the chain of command domain that shared resource alarm is advertised in system control by managing process in main LR into Journey；

Step 404: chain of command domain process determines the coverage of the alarm according to the resource allocation table of LR；Wherein, resource Allocation table by system control in other processes safeguard；

Step 405: shared resource alarm is distributed to the managing process of each impacted LR；

Step 406: receiving the managing process of the LR of above-mentioned shared resource alarm, which is handled.Specifically Processing mode is identical with minor alarm processing mode, that is, is output to terminal, is logged by, sends SNMP trap(Simple Network Management Protocol trap, simple network management protocol trap) etc.；

Step 407: terminating.

And the transfer mode of other LR ranks alarm is similar with above-mentioned process, it will not be described herein.

Status monitoring can be by the way of inquiry or reporting, and status information may be from system control or some LR. As described in Figure 5, the method for LR state is inquired, comprising:

Step 501: main LR initiates status monitoring inquiry request；It, can be in the request if the only state of query portion LR The identification information of each LR of inquiry is requested in middle carrying；

Step 502: the status monitoring inquiry request is sent to system control chain of command domain process by the management domain in main LR；

Step 503: system controls chain of command domain process and the status monitoring inquiry request is distributed to related LR；

If the state of all LR is inquired in main LR request, which can be distributed to other each LR； If the state of main LR request query portion LR, can inquire the status monitoring according to the identification information carried in the request Request is distributed to relevant LR；

Step 504: receiving the LR of status monitoring inquiry request, query-relevant data simultaneously returns to system control chain of command domain Process；

Step 505: system control chain of command domain process receives query result and returns to main LR；

Step 506: main LR receives and processes monitoring state and (shows the detecting state as a result, reporting that relevant failure is wrong The information such as mistake)；

Step 507: terminating.

In addition, in the present embodiment, a kind of physical router includes: system control and more than one virtual router (LR), comprising:

Preferably,

Those of ordinary skill in the art will appreciate that all or part of the steps in the above method can be instructed by program Related hardware is completed, and described program can store in computer readable storage medium, such as read-only memory, disk or CD Deng.Optionally, one or more integrated circuits can be used also to realize in all or part of the steps of above-described embodiment.Accordingly Ground, each module/unit in above-described embodiment can take the form of hardware realization, can also use the shape of software function module Formula is realized.The present invention is not limited to the combinations of the hardware and software of any particular form.

The foregoing is only a preferred embodiment of the present invention, is not intended to limit the scope of the present invention.According to Summary of the invention of the invention can also have other various embodiments, without deviating from the spirit and substance of the present invention, be familiar with Those skilled in the art makes various corresponding changes and modifications in accordance with the present invention, all in the spirit and principles in the present invention Within, any modification, equivalent replacement, improvement and so on should all be included in the protection scope of the present invention.

Claims

1. A method for managing a virtual router, applied in a physical router comprising a system control and a virtual router LR; comprising:

A management plane domain process is built in the system control, a management process is built in each LR, and the management plane domain process and the management process in each LR constitute a management domain;

The management plane domain process exchanges information with management processes in each LR in the management domain.

2. The method of claim 1, wherein:

Described management plane domain process carries out information exchange with the management process in each LR, specifically includes:

When detecting that the user is logged in, the management process in the main LR requests the identification information of the currently online LR from the management plane domain process;

After receiving the response returned by the management plane domain process, the management process of the main LR displays the identification information of the current online LR; and after confirming that the user has selected an LR, prompts the user to input the user name and password information; After the user completes the input, if it is determined that the user name and password are correct, log in to the LR selected by the user.

3. The method of claim 2, further comprising:

After logging in to the LR selected by the user, the management process in the primary LR registers with the management plane domain process to go online, and is notified of going offline after the user logs out.

4. The method of claim 2, further comprising:

After receiving the response returned by the management plane domain process, the management process of the primary LR directly prompts the user to enter the user name and password to log in to the primary LR if it is determined that there is no LR online currently.

5. The method of claim 1, wherein:

The management plane domain process exchanges information with the management process in each LR, specifically including:

The LR or system control where the alarm occurs will release the alarm that needs to be communicated to the management plane process, and the management plane process determines the scope of influence and forwards it to the management process of the corresponding LR.

6. The method of claim 5, wherein:

The management plane domain process determines the influence scope of the alarm according to the resource allocation table.

7. The method of claim 5 or 6, wherein:

The management process of the LR that receives the alert outputs the alert to the terminal, logs it and sends a Simple Network Management Protocol trap.

8. The method of claim 1, wherein:

The management plane domain process sends the acquired status information of each LR to the management process of the master LR.

9. The method of claim 8, wherein:

The management process in the primary LR sends the status query request initiated by the primary LR to the management plane domain process;

After receiving the status query request, the management plane domain process sends the status query request to each LR;

The management plane domain process acquires the status information of each LR, which specifically includes:

The management plane domain receives the status information returned by each LR after receiving the status query request.

10. The method of claim 8, wherein:

Each LR periodically reports its own state information to the management plane domain.

11. A physical router comprising: a system control and one or more virtual routers LR, comprising:

A management plane domain process is built in the system control, the management plane domain process and the management process in each LR constitute a management domain, and the management plane domain process is used to communicate with the management process in each LR in the management domain. interact;

Each LR has a built-in management process, and the management process is used for information interaction with the management plane domain process.

12. The physical router of claim 11, wherein:

The management process is used for information interaction with the management plane process, and specifically includes:

The management process in the main LR is used to request the management plane domain process for the identification information of the currently online LR when detecting that the user is logged in; after receiving the response returned by the management plane domain process, display the current online LR After confirming that the user has selected an LR, the user is prompted to input the user name and password information; after confirming that the user has completed the input, if it is judged that the user name and password are correct, log in to the LR selected by the user.

13. The physical router of claim 12, wherein:

The management process in the main LR is further configured to register with the management plane domain process after logging in to the LR selected by the user, and notify the user to go offline after logging out.

14. The physical router of claim 12, wherein:

The management process of the primary LR is further configured to directly prompt the user to enter a user name and password to log in to the primary LR if it is determined that no LR is currently online after receiving the response returned by the management plane domain process.

15. The physical router of claim 11, wherein:

The management plane domain process is used to exchange information with the management process in each LR, and specifically includes:

The management plane domain process is used to determine the scope of influence and forward the alarm to the corresponding LR after receiving the alarm that needs to be communicated from the LR in which the alarm occurred or the system control.

16. The physical router of claim 15, wherein:

The management plane process is used to determine the influence scope of the alarm according to the resource allocation table.

17. The physical router of claim 15 or 16, wherein:

The management process in the LR is configured to output the alarm to the terminal, record the alarm and send a Simple Network Management Protocol trap after receiving the alarm.

18. The physical router of claim 11, wherein:

The management plane domain process is used to send the acquired state information of each LR to the management process of the master LR.

19. The physical router of claim 18, wherein:

The management process in the master LR is configured to send the status query request initiated by the master LR to the management plane process;

The management plane domain process is configured to send the status query request to each LR after receiving the status query request;

The management plane field is used to receive status information returned by each LR after receiving the status query request.

20. The physical router of claim 18, wherein:

Each LR is used to periodically report its own state information to the management plane domain.