CN116405344A - Method and equipment for detecting link - Google Patents

Abstract

The present application provides a method and device for detecting a link. The method includes identifying more than one STP non-edge port supporting the STP protocol and more than one STP edge port not supporting the STP protocol; recording each STP edge port identified; blocking the receiving or sending data message through each STP edge port .

Description

Method and device for detecting link

technical field

The present application relates to communication technology, in particular to a method and device for detecting a link.

Background technique

With the development and changes of technologies such as IT infrastructure and mobile Internet, the security protection methods and ideas of the campus network are facing many challenges. There are more and more types and quantities of mobile terminals in the campus network, and any terminal device may become a springboard for invading the entire campus network.

The campus network should build a layer-by-layer in-depth security defense system with the "traffic path" as the core, and determine the security defense boundary by rationally dividing security areas, including Internet access areas, WAN access areas, user access areas, and server access areas. area and other safe areas. Therefore, in the campus network, specific backbone (spine) devices between areas are connected, and leaf (leaf) switching devices or downstream devices of leaf switching devices between different areas are not connected. However, in the implementation process of the campus network planning, once the interconnected network devices are not allowed to cause loops in the network due to incorrect wiring, manual troubleshooting of incorrect wiring is not only a heavy workload, but also to prevent forwarding storms caused by loops, leaf switching devices connect The incoming access switch sends STP protocol packets to block Layer 2 network loops. However, when an illegal device is connected to the network that does not support the STP protocol, it cannot rely on the STP protocol to identify the blocked loop, resulting in a loop storm.

Contents of the invention

The purpose of this application is to provide a method and device for detecting a link, which blocks the data forwarding of the device that does not support the STP protocol.

In order to achieve the above object, the present application provides a method for detecting a link, which method includes identifying more than one STP non-edge port supporting the STP protocol and more than one STP edge port not supporting the STP protocol; recording each identified STP Edge port; block receiving or sending data packets through each STP edge port.

In order to achieve the above object, the present application also provides a device for detecting links, the device includes a processor and a memory; the memory is used to store processor-executable instructions; wherein, the processor runs the processor-executable instructions in the memory Used to perform the following operations: one or more STP non-edge ports that support the STP protocol and more than one STP edge port that does not support the STP protocol; record each STP edge port identified; block receiving or sending data through each STP edge port message.

The beneficial effect of the present application is that the ports that do not support the STP protocol message are blocked, the equipment in the two-layer network cannot identify the loop through the STP protocol, and the loop storm in the two-ring network is avoided.

Description of drawings

FIG. 1 is a flowchart of a method embodiment of a link detection method provided by the present application;

2A-2B are schematic diagrams of link detection in a Layer 2 network provided by an embodiment of the present application;

FIG. 3 is a schematic diagram of an embodiment of a loop detection device provided in the present application.

Detailed ways

A detailed description will be given with a plurality of examples shown in a plurality of drawings. In the following detailed description, numerous specific details are used to provide a thorough understanding of the application. Well-known methods, procedures, components and circuits have not been described in detail in order not to obscure the examples.

Among the terms used, the term "comprising" means including but not limited to; the term "comprising" means including but not limited to; the terms "above", "within" and "below" include the number; the terms "greater than" and "less than" mean not Include this number. The term "based on" means based on at least a portion thereof.

Figure 1 is a flowchart of a method embodiment of a link detection method provided by the present application, the method comprising:

Step 101, identifying more than one STP non-edge port supporting the STP protocol and more than one STP edge port not supporting the STP protocol;

Step 102, record each STP edge port identified;

Step 103, blocking the data packets received or sent through each STP edge port.

The beneficial effect of the embodiment in FIG. 1 is that it blocks ports that do not support STP protocol messages, avoids devices in the two-layer network from being unable to identify loops through the STP protocol, and avoids loop storms in the two-ring network.

Fig. 2A shows the schematic diagram of detecting links in the two-layer network provided by the embodiment of the present application; in this large two-layer network, the two-layer switches are divided into backbone (spine) layer switches and leaf (leaf) layer switches according to their roles and an access (access) switch; backbone layer switches spine1 and spine2 are connected to the three-layer switch through an equal cost path (Equal cost MultiplePath, ECMP).

The large layer 2 can be an ordinary layer 2 network, or a layer 2 network interconnected through a layer 2 VPN tunnel, and leaf layer switches are interconnected through a layer 2 VPN tunnel, such as a VXLAN tunnel. Access layer switches are used to access terminals (not shown in Figure 2).

For ease of description, this application uses some switches, access14, 15, 16, leaf21, 22 as examples. Switches access14, 15, 16, leaf21, 22 determine to start the loop detection function; send the STP loop detection message with the device identification through each port.

Switches access14, 15, 16, leaf21, 22 send STP loop detection messages through each port and detect whether they return to the device (the receiving and sending ports are not required to be the same port) to confirm whether there is a loop. If a port receives a loop detection message sent by the device, it is determined that there is a loop on the link where the port is located.

In FIG. 2A , the port of the switch access16 connected to the switch access15 is faulty, and the STP loop detection message with the device identifier of the switch access16 cannot be sent.

Switches access14, 15, 16, leaf21, 22 check whether each port receives the STP loop detection message of the device identification of the STP neighbor when the initial loop detection period arrives.

The switch access15 will receive the STP loop detection message with other equipment identifications in the initial loop detection period. Ports that have not received STP loop detection packets with other device identifiers, that is, ports connected to the switch access16 are identified as STP edge ports.

The switch access14 recognizes each port (that is, the port connected to the switch access16, leaf21, 22) that receives the STP loop detection message with other device identifiers in the initial loop detection cycle as an STP non-edge port; Ports that do not receive STP loop detection messages with other device identifiers within the detection period, that is, ports connected to illegal devices 17 are identified as STP edge ports.

The switch access15 records the port that will be connected to the switch access16 as an STP edge port, and blocks the port from receiving or sending data packets.

The switch access14 records the port that will be connected to the illegal device 17 as an STP edge port, and blocks the port from receiving or sending data packets.

In Fig. 2B, the switch access15 sends the STP black hole detection message with the device identification through the port connected to the switch access16;

The switch access14 sends the STP black hole detection message with the device identification through the port connected to the illegal device 17.

The port connecting switch access16 to switch access15 is faulty, and resumes sending STP loop detection packets.

The switch access15 receives the STP loop detection message within the specified black hole detection time through the port connected to the switch access16, records it as an STP non-edge port and allows receiving or sending data messages.

When the new loop detection cycle arrives, the switch access15 connects and sends the STP loop detection message with the device identification through the recorded STP non-edge port (that is, the port connected to leaf21, 22, and access16); Receive STP loop detection packets with other device identifiers from these ports during the loop detection cycle, and identify these ports as STP non-edge ports.

When the new loop detection cycle arrives, the switch access14 connects and sends the STP loop detection message with the device identification through the recorded STP non-edge port (that is, the port connected to leaf21, 22); and the loop detection Receive STP loop detection packets with other device identifiers from these ports within a period, and identify these ports as STP non-edge ports.

If the switch access14 does not receive an STP loop detection message through the port connected to the illegal device 17 within the specified black hole detection time, close the port, delete the record of the STP edge port, that is, the port connected to the illegal device 17, and no longer waste resources from this port. The port sends black hole detection packets.

Other leaf (leaf) layer switches and access (access) switches in Figures 2A and 2B can detect links in the same manner, and the specific content will not be repeated here.

FIG. 3 is a schematic diagram of an embodiment of a loop detection device provided in the present application. The device 30 includes a processor and a memory; the memory is used to store processor-executable instructions; wherein, the processor executes the processor-executable instructions in the memory to perform the following operations: identify more than one STP non-edge port and more than one STP edge port; record each STP edge port identified; block receiving or sending data packets through each STP edge port.

The processor runs the processor-executable instructions in the memory to perform the following operations: send an STP black hole detection message with the device identification through each STP edge port; when any STP edge port receives a black hole detection message within the specified black hole detection time When receiving an STP loop detection packet with other device identifiers, record it as an STP non-edge port and allow receiving or sending data packets.

The processor executes the following operations by running the processor-executable instructions in the memory: close the STP edge port that has not received the STP loop detection message with other equipment identification within the specified black hole detection time; Delete the closed STP edge port from the edge port.

The processor executes the processor-executable instructions in the memory to perform the identifying more than one STP non-edge port and more than one STP edge port, including the following operations: determine to start the loop detection function; The STP loop detection message identified by the device; identify each port that receives the STP loop detection message with other device identification in the initial loop detection period as an STP non-edge port; Each port that has not received an STP loop detection packet with other device identifiers is identified as an STP edge port.

The processor executes the processor-executable instructions in the memory to perform the identifying more than one STP non-edge port and more than one STP edge port, including the following operations: determining that a new loop detection cycle arrives; The non-edge port sends the STP loop detection message with the device identification; each port that receives the STP loop detection message with other device identification in the new loop detection period is identified as the STP non-edge port; Identify each port that has not received an STP loop detection packet with the identifier of another device within the new loop detection period as an STP edge port.

The above is only a preferred embodiment of the application, and is not intended to limit the application. Any modifications, equivalent replacements, improvements, etc. made within the spirit and principles of the application should be included in the application. within the scope of protection.

Claims (10)

1. A method of detecting a link, the method comprising:

identifying one or more STP non-edge ports and one or more STP edge ports;

recording each of said STP edge ports identified;

blocking the reception or transmission of data messages through each of said STP edge ports.

2. The method according to claim 1, wherein the method further comprises:

transmitting STP black hole detection messages with the equipment identifier through each STP edge port;

and when any STP edge port receives the STP loop detection message with other equipment identifiers in the appointed black hole detection time, recording the STP loop detection message as an STP non-edge port and allowing the receiving or sending of the data message.

3. The method according to claim 1, wherein the method further comprises:

closing the STP edge port which does not receive the STP loop detection message with other equipment marks in the appointed black hole detection time;

and deleting the closed STP edge port from all the STP edge ports.

4. The method of claim 1, wherein the identifying one or more STP non-edge ports and one or more STP edge ports comprises

Determining to start a loop detection function;

transmitting STP loop detection messages with the equipment identifier through each port;

identifying each port of the STP loop detection message with other equipment identifiers received in the initial loop detection period as the STP non-edge port;

and identifying each port which does not receive the STP loop detection message with other equipment identifiers in the initial loop detection period as the STP edge port.

5. The method of claim 1, wherein the identifying one or more STP non-edge ports and one or more STP edge ports comprises

Determining that a new loop detection period arrives;

sending an STP loop detection message with the equipment identifier through the recorded STP non-edge port;

identifying each port of the STP loop detection message with other equipment identifiers received in the new loop detection period as the STP non-edge port;

and identifying each port which does not receive the STP loop detection message with other equipment identifiers in the new loop detection period as the STP edge port.

6. An apparatus for detecting a link, the apparatus comprising a processor and a memory; the memory is used for storing processor executable instructions; wherein the processor is configured to, by executing processor-executable instructions in the memory, perform the following:

identifying one or more STP non-edge ports and one or more STP edge ports;

recording each of said STP edge ports identified;

blocking the reception or transmission of data messages through each of said STP edge ports.

7. The apparatus of claim 6, wherein the processor is configured to, by executing processor-executable instructions in the memory, perform operations comprising:

transmitting STP black hole detection messages with the equipment identifier through each STP edge port;

and when any STP edge port receives the STP loop detection message with other equipment identifiers in the appointed black hole detection time, recording the STP loop detection message as the STP non-edge port and allowing the receiving or sending of the data message.

8. The apparatus of claim 6, wherein the processor is configured to, by executing processor-executable instructions in the memory, perform operations comprising:

closing the STP edge port which does not receive the STP loop detection message with other equipment marks in the appointed black hole detection time;

and deleting the closed STP edge port from all the STP edge ports.

9. The apparatus of claim 6, wherein the processor is configured to perform the identifying one or more STP non-edge ports and one or more STP edge ports by executing processor-executable instructions in the memory comprising:

determining to start a loop detection function;

transmitting STP loop detection messages with the equipment identifier through each port;

identifying each port of the STP loop detection message with other equipment identifiers received in the initial loop detection period as the STP non-edge port;

and identifying each port which does not receive the STP loop detection message with other equipment identifiers in the initial loop detection period as the STP edge port.

10. The apparatus of claim 6, wherein processor is configured to perform the identifying one or more STP non-edge ports and one or more STP edge ports by executing processor-executable instructions in the memory comprising:

determining that a new loop detection period arrives;

sending an STP loop detection message with the equipment identifier through the recorded STP non-edge port;

identifying each port of the STP loop detection message with other equipment identifiers received in the new loop detection period as the STP non-edge port;

and identifying each port which does not receive the STP loop detection message with other equipment identifiers in the new loop detection period as the STP edge port.

Images