[go: up one dir, main page]

WO2008095360A1 - Method and system for switching rapidly when there is a failure of virtual private network link path - Google Patents

Method and system for switching rapidly when there is a failure of virtual private network link path Download PDF

Info

Publication number
WO2008095360A1
WO2008095360A1 PCT/CN2007/002392 CN2007002392W WO2008095360A1 WO 2008095360 A1 WO2008095360 A1 WO 2008095360A1 CN 2007002392 W CN2007002392 W CN 2007002392W WO 2008095360 A1 WO2008095360 A1 WO 2008095360A1
Authority
WO
WIPO (PCT)
Prior art keywords
vpn
provider edge
edge routing
link
vlan
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2007/002392
Other languages
English (en)
French (fr)
Inventor
Kang Zi
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Publication of WO2008095360A1 publication Critical patent/WO2008095360A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/06—Management of faults, events, alarms or notifications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
    • H04L41/40—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks using virtualisation of network functions or resources, e.g. SDN or NFV entities

Definitions

  • the present invention relates to the field of communications technologies, and in particular, to a method and system for performing fast handover when a virtual private service (VPN) link fails.
  • VPN virtual private service
  • VPLS Virtual Private LAN Service
  • PW Pseudo Wire
  • VSI Virtual Switch Instance
  • the reliability requirements are higher and higher. It is usually required to double-homing the Provider Edge Router (PE) device of the access user to the two PE devices.
  • PE Provider Edge Router
  • FIG 1 the existing VPLS networking diagram, the user edge (CE) CE1 and CE2 through the Multi-Tenant Unit Switch (MTU-s) device MTU-s 1 and the backbone network
  • MTU-s Multi-Tenant Unit Switch
  • PE-rs Provider Edge Router Switch
  • PE3-rs PE-rsl and PE3-rs are connected.
  • the MTU-s1 passes the VPLS data packet of CE1 or CE2 through the primary virtual link.
  • PW is sent to PE-rsl, which is forwarded by PE-rsl to PE-rs2 through the backbone network.
  • the MTU-s1 sends the VPLS data packet of CE1 or CE2 to PE-rs3 through the secondary virtual link ( Secondary PW), and PE-rs3 passes through the bone network. Forward to PE-rs2.
  • VPLS can carry multiple layers of VLAN services, that is, a PE-rs can be connected to multiple MTU-s for transmission.
  • a virtual link is formed from the MTU-s1 through the PE-rsl to the PE-rs2. If the port on the MTU-s1 fails with the virtual link, or the PE-rsl device fails, or the MTU-sl and the MTU-sl The link between the PE and the rsl is faulty. The fault is often that the PE-rsl cannot receive the traffic that is transmitted by the MTU-s1, or the backup device that is the PE-rsl starts and receives the service traffic.
  • the device that detects the fault sends a MAC Withdraw message to other PE-rs.
  • the MAC Withdraw message records the information of all MTU-s related to the virtual link, which can be used in the MAC Withdraw message. A detailed list of MAC addresses.
  • the other PE-rs After receiving the MAC Withdraw message, the other PE-rs will flood the devices on the network to ensure that the service traffic can be broadcast to the PE-rs to which the MTU-s is connected.
  • the MAC Withdraw message is mainly used. If the MAC withdraw message uses a detailed MAC address list to record the faulty device, when the MAC address recorded in the message is large, the processing efficiency is inevitably affected. .
  • the MTU-s with the link between the PE-rs and the PE-rs is also faulty. It will be affected and flooded, which will affect the processing efficiency of the VPN.
  • the object of the present invention is to solve the defect that the processing efficiency of the VPN is low when the MAC Withdraw message notification is used in the processing of the link failure, and a method and system for performing fast handover when the VPN link is faulty is proposed, which can be in the MTU.
  • a method and system for performing fast handover when the VPN link is faulty is proposed, which can be in the MTU.
  • the link between -s and PE-rs fails, to other PE-rs Advise more reasonable information to improve efficiency and not affect the business of other MTU-s.
  • the present invention provides a method for rapidly switching when a VPN link fails, including the following steps:
  • the notification message is sent to each provider edge routing switch in the VPN, where the notification message includes the virtual local area network VLAN information corresponding to the faulty link;
  • each of the provider edge routing switches After receiving the message, each of the provider edge routing switches updates the forwarding entry of the VLAN stored in the VLAN according to the VLAN information, and floods the subsequent service traffic to each network element in the VPN.
  • the fault detection module is configured to detect whether a link between the provider edge routing switch and the multi-user unit switch is faulty
  • a message construction module configured to be connected to the fault detection module, configured to notify a virtual local area network (VLAN) VLAN information corresponding to the faulty link when a link between the provider edge routing switch and the multi-user unit switch fails Message
  • VLAN virtual local area network
  • a message sending module configured to be connected to the message construction module, for sending a notification message output by the notification message construction module to each provider edge routing switch;
  • a message receiving module configured to be connected to the message sending module, configured to notify the forwarding table management module after receiving the notification message
  • a forwarding table management module configured to be connected to the message receiving module, configured to: after receiving the notification, according to the forwarding entry of the VLAN in the edge routing switch of the VLAN information provider, and to forward subsequent service traffic to the VPN Each network element is flooded.
  • the foregoing embodiment has the following advantages:
  • the VLAN list or other manner corresponding to the VLAN list is used to indicate the faulty link, which can simplify the notification of the message of each PE-rs when the link is faulty, so that the notification can be notified at a higher efficiency.
  • a fault condition, and the MTU-s corresponding to the VLAN that has not failed is not affected.
  • Figure 1 is a schematic diagram of the existing VPLS VPN networking
  • FIG. 2 is a schematic flow chart of a first embodiment of a method for fast handover when a VPN link fails according to the present invention
  • FIG. 3 is a schematic flow chart of a second embodiment of a method for rapidly switching a VPN link in a fault according to the present invention
  • FIG. 4 is a schematic flow chart of a third embodiment of a method for fast handover when a VPN link fails according to the present invention
  • FIG. 5 is a schematic diagram of the VLA list
  • Figure 6 is a schematic diagram of another VPLS VPN networking
  • FIG. 7 is a schematic structural diagram of an embodiment of a fast switching system according to the present invention. detailed description
  • the basic idea of the present invention is: to improve the notification of the message of each PE-rs when the VPN link is faulty, and replace the complete address of the MAC with a VLAN or other representation corresponding to the VLAN, thereby making the message shorter and improving the processing efficiency. .
  • the MTU-s In the networking of the VPN, the MTU-s must be dual-homed to different PE-rs, and the MTU-s uses the same VLAN as the identifier. You can use one VLAN or multiple VLANs.
  • the VLAN forwarding entries of the MTU-s of the VPN are stored in each PE-rs.
  • FIG. 2 it is a schematic flowchart of a first embodiment of a method for rapidly switching a VPN link in the present invention.
  • the embodiment includes the following steps:
  • Step 10 When the link between the PE-rs and the MTU-s fails, the PE-rs sends a notification message to each PE-rs in the VPN, and the sent notification message includes the VLAN information corresponding to the faulty link.
  • Step 20 After receiving the notification message, each PE-RS updates the VLAN forwarding entry stored in the packet according to the VLAN information contained in the notification message, and then floods each network element in the VPN according to the VLAN forwarding entry.
  • the VLAN forwarding entry stored in the PE-rs itself includes the service traffic that the PE-rs needs to forward, and the MTU-s are identified by the VLAN.
  • step 10a when the PE-rs does not receive the service traffic sent by the MTU-s within a predetermined time, the PE-rs sends a notification message to each PE-rs in the VPN.
  • the predetermined time can be set by the user according to the actual situation, or can be set by the system when it is initialized.
  • the traffic that is not received by the MTU-s within the predetermined time is usually caused by two situations. One case is that the MTU-s port that sends the service traffic fails, and the service traffic cannot be sent.
  • the other case is MTU-s.
  • the link between the PE and the PE-rs fails, so that the traffic sent by the MTU-s cannot be transmitted to the PE-rs through the link. At this time, the two faults are monitored by the PE-rs. If there is no service traffic within the predetermined time, the link fault is considered to be sent, and the notification message is sent to other PE-rs immediately.
  • FIG. 4 it is a schematic flowchart of a third embodiment of a method for fast handover when a VPN link fails according to the present invention.
  • this embodiment describes that the PE-rs itself fails in step 10b.
  • the PE-rs device has its own backup PE-rs.
  • the backup PE-rs takes over the work of the original PE-rs and receives service traffic from the MTU-s.
  • the present invention serves as a basis for judging the failure of the PE-rs itself.
  • the backup PE-rs receives service traffic from the MTU-s, it sends a notification message to each PE-rs in the VPN.
  • the notification message sent to the PE-rs in the above three embodiments includes the VLAN information of the MTU-s corresponding to the faulty link.
  • each PE-rs carries the MTU of the VPN.
  • -s VLAN list the so-called VLAN list is shown in Figure 5.
  • Each MTU-s can access multiple CEs.
  • PE-r s distinguishes CEs through different VLANs in the same layer.
  • the VLAN distinguishes the CE.
  • the notification message containing the VLAN information of the faulty link may include various forms, such as a VLAN Withdraw message, and such a VLAN Withdraw message and a "MAC Withdraw message" belong to an LDP Address Withdraw message, but a VLAN list is used in the LDP Address Withdraw. It replaces the MAC address and simplifies the message content, which improves efficiency when processed.
  • the VLAN list of the failed link can also be carried by other types of messages such as notify messages.
  • the notification message may also carry information corresponding to the VLAN list. For example, when establishing a VPLS VPN, the MTU-s VLAN list and each port of each port are simultaneously established. The relationship between the IDs, so that only the ID corresponding to the MTU-s port of the shorter fault link can be carried in the sent ID Withdraw message, thereby further simplifying the notification message and improving the processing efficiency.
  • the PE-rs2 is used as the destination PE-rs of the service traffic.
  • PE-rsl If the service traffic sent by the MTU-s1 is not received within a predetermined time (for example, 5 ms), it is determined that the link has failed, and a VLAN Withdraw message containing the VLAN identifier corresponding to the MTU-s1 of the faulty link is generated. Then, the VLAN Withdraw message is sent to each PE-rs in the VPN. After receiving the message, the PE3-rs will store the forwarding entry corresponding to the MTU-sl and PE-rsl according to the message. The content of the link is cleared and flooded, so that the service traffic received on the MTU-s1 can be forwarded to the PE-rs2 through the PE3-rs, so that the service of the user is not interrupted.
  • a predetermined time for example, 5 ms
  • the PE-rs can learn the forwarding entries based on the updated forwarding entries. When the forwarding entries are learned, the flooding stops. Then, the traffic is sent to the path defined by the learned forwarding entries. Purpose PE-rs.
  • the present invention also provides a fast switching system, as shown in FIG. 7, which is a schematic structural diagram of an embodiment of the fast switching system of the present invention, including a fault detecting module 1, a message constructing module 2, a message sending module 3, which are sequentially connected.
  • the notification message containing the VLAN information corresponding to the faulty link is constructed; the message sending module 3 is configured to send the message output by the notification message constructing module to each PE-rs; the message receiving module 4 is used to After receiving the notification message from the message sending module, the forwarding table management module is notified; after receiving the notification, the forwarding table management module 5 is configured to: according to the forwarding table of the VLAN in the edge routing switch of the VLAN information provider Item, and floods subsequent service traffic to each network element in the VPN.
  • the notification message sent by the message sending module 3 is a VLAN Withdraw message, a notify message or an ID.
  • One of the Withdraw messages is a VLAN Withdraw message, a notify message or an ID.
  • the fault detecting module 1 may further include: a first detecting module 10 and a second detecting module 11.
  • the first detecting module 10 is configured to determine that a link between the PE-rs and the MTU-s fails when the PE-rs does not receive the service traffic sent by the MTU-s within a predetermined time.
  • the second detecting module 11 is configured to determine that the link between the PE-rs and the MTU-s fails when the backup PE-rs receives the service traffic from the MTU-s.
  • the forwarding table management module 5 may further include: a clearing module 50 and a forwarding module 51.
  • the clearing module 50 is configured to: according to the VLAN information, clear a forwarding entry of a corresponding virtual private network VPN and a VLAN in each PE-rs.
  • the forwarding module 51 is configured to: after the forwarding entry is cleared, the PE-rs floods the service traffic to each network element in the VPN, and in the forwarding process, each PE-rs performs forwarding entry learning, and the forwarding entry is When the learning is complete, the flooding is stopped, and the service traffic is sent to the destination PE-rs according to the learned forwarding entry.
  • the fast switching system may further include: establishing a module 6.
  • the establishing module 6 is configured to generate a list of IDs corresponding to the VLAN list when the VPN is established, and notify each PE-rs.
  • the message sending module 3 can send a message including the VLAN information corresponding to the faulty link to each PE-rs when the fault occurs, so that the PE-rs can perform the VPN and VLAN forwarding entries stored by the PE-rs. It is cleared and then flooded, so that traffic can be smoothly sent to the destination PE-rs, and the VLAN information is used to replace the MAC address of the prior art, which greatly improves the processing efficiency.
  • the forwarding entry is also learned. When the forwarding entry learning is completed, the flooding is stopped and the normal data transmission process is resumed.
  • modules or steps of the above-described embodiments of the present invention may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed among multiple computing devices.
  • they may be implemented by program code executable by the computing device, such that they may be stored in the storage device by the computing device, or they may be separately fabricated into individual integrated circuit modules, or Make multiple modules or steps in them Implemented as a single integrated circuit module.
  • the invention is not limited to any specific combination of hardware and software. It is to be understood that changes in these specific embodiments will be apparent to those skilled in the art without departing from the scope of the invention.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Small-Scale Networks (AREA)

Description

虚拟专用网链路故障时快速切换的方法及系统
技术领域
本发明涉及通信技术领域， 尤其是一种虚拟专用网络 （Virtual Private Service , VPN )链路故障时进行快速切换的方法及系统。 背景技术
虚拟专用局域网服务（ Virtual Private LAN Service , 简称 VPLS )作为一种 曰渐成熟的二层 VPN技术， 其应用已经越来越广泛。 VPLS技术是在现有的广 域网基础上提供虚拟以太网服务的技术， 通过成员关系发现、 虚拟链路（Pseudo Wire , PW ) 建立与维护以及虚拟交换实例 （ Virtual Switch Instance， VSI ) 内基 于 MAC地址的转发实现跨广域网的局域网站点的互连，从而把地理上分散的局 域网互联起来。
在 VPLS 的实际应用过程中， 可靠性的要求越来也高， 通常需要将接入用 户的提供商边缘路由器（ Provider Edge Router, PE )设备双归属到两台 PE设备 上。 如图 1所示， 为现有 VPLS组网示意图， 用户边缘（Custom Edge, CE )设 备 CE1和 CE2通过多用户单元交换机 ( Multi-Tenant Unit switch, MTU-s )设 备 MTU-s 1与骨干网上的提供商边缘路由交换机（ Provider Edge Router Switch , PE-rs )设备 PE-rsl和 PE3-rs连接， 在正常情况下， MTU-sl将 CE1或 CE2的 VPLS数据报文通过主虚拟链路 ( Primary PW )发送给 PE-rsl , 由 PE-rsl通过骨 干网转发到 PE-rs2上。
如果预设的虚拟链路或者 PE-rsl 出现故障， 则 MTU-sl将 CE1或 CE2的 VPLS数据报文通过副虚拟链路（ Secondary PW )发送给 PE-rs3 , 由 PE-rs3通过 骨千网转发到 PE-rs2上。
随着虚拟局域网絡（VLAN ) 的扩展与交换 （QmQ ) 技术的发展， VPLS 可以承载多层 VLAN业务 , 也就是说一个 PE-rs可以与多个 MTU-s连接， 进行 传输。 举例来讲，从 MTU-sl通过 PE-rsl到 PE-rs2形成一条虚拟链路，如果 MTU-sl 上与该虚拟链路的端口出现故障， 或者 PE-rsl设备发生故障， 或者 MTU-sl与 PE-rsl之间的链路发生故障， 这种故障常常体现为 PE-rsl无法收到 MTU-sl传 输的业务流量， 或者体现为 PE-rsl 的备份设备启动并接收业务流量， 现有技术 在这种故障发生时， 会由检测到发生故障的设备向其他 PE-rs 发送 MAC Withdraw消息， MAC Withdraw消息中记录了与虚拟链路相关的所有 MTU-s的 信息， 在 MAC Withdraw消息中可以采用详细的 MAC地址列表。 其他 PE-rs收 到该 MAC Withdraw消息后， 会向网络中各个设备发起洪泛， 以保证业务流量 能够广播到 MTU-s归属连接的 PE-rs上。
假设在图 1中与 PE-rsl建立连接的 MTU-sl上的相应端口发生了故障， PE-rsl 在一定时间内无法接收到流量， 因此判断 MTU-sl与 PE-rsl之间的链路发生故障， 因此向整个 VPN中的各个设备发送 MAC Withdraw消息， PE-rs3接收到该 MAC Withdraw消息后， 会将从 MTU-sl上接收的业务流量洪泛， 使 PE-rs2能够接收到 业务流量， 从而不影响业务的正常使用。
但是现有技术在处理故障时， 主要利用了 MAC Withdraw消息， 如果 MAC Withdraw消息中釆用详细的 MAC地址列表来记录发生故障的设备， 那么当消息 中记录的 MAC地址较多时， 必然影响处理效率。
而如果 MAC Withdraw消息中不采用详细的 MAC地址列表，并且检测到故障 的 PE-rs连接有多个 MTU-s时， 则与该 PE-rs之间的链路没有发生故障的 MTU-s也 会受到影响而进行洪泛 , 从而影响 VPN的处理效率。
综上所述， 现有技术在 MTU-s和 PE-rs之间的链路发生故障时， 进行切换的 效率很低。 发明内容
本发明的目的是针对现有技术在处理链路故障时釆用 MAC Withdraw消息 通知而造成 VPN的处理效率低的缺陷， 提出一种 VPN链路故障时进行快速切 换的方法及系统， 能够在 MTU-s和 PE-rs之间的链路发生故障时， 向其他 PE-rs 通告更合理的信息， 以提高效率， 并且不影响其他 MTU-s的业务。
为实现上述目的， 本发明提供了一种 VPN链路故障时快速切换的方法， 包 括以下步骤：
当提供商边缘路由交换机与多用户单元交换机之间链路发生故障时， 向 VPN中各个提供商边缘路由交换机发送通知消息， 所述通知消息包含所述故障 链路所对应的虚拟局域网 VLAN信息；
所述各个提供商边缘路由交换机接收到所述消息后， 根据所述 VLAN信息 更新自身存储的该 VLAN的转发表项，并将后续的业务流量向 VPN中各个网元 进行洪泛。
本发明实施例提供的一种快速切换系统包括：
故障检测模块，用于检测提供商边缘路由交换机与多用户单元交换机之间链 路是否发生故障；
消息构造模块， 与所述故障检测模块相连，用于在提供商边缘路由交换机与 多用户单元交换机之间链路发生故障时， 构造包含所述故障链路所对应的虚拟 局域网络 VLAN信息的通知消息；
消息发送模块， 与所述消息构造模块相连，用于将所述通知消息构造模块输 出的通知消息发送给各个提供商边缘路由交换机；
消息接收模块， 与所述消息发送模块相连， 用于接收到所述通知消息后， 通 知转发表管理模块；
转发表管理模块， 与所述消息接收模块相连， 用于收到所述通知后， 根据所 述 VLAN信息提供商边缘路由交换机中的该 VLAN的转发表项， 并将后续的业 务流量向 VPN中各个网元进行洪泛。
上述实施例具有以下优点： 采用 VLAN列表或者对应于 VLAN列表的其他 方式来表示发生故障的链路， 可以简化链路故障时通知各个 PE-rs的消息 , 从而 既能以较高效率同时通知多个故障情况， 而且使对应着未发生故障的 VLAN的 MTU-s不受影响。 附图说明
图 1为现有 VPLS VPN组网示意图；
图 2 为本发明 VPN链路故障时快速切换的方法的第一实施例的流程示意 图；
图 3 为本发明 VPN链路故障时快速切换的方法的第二实施例的流程示意 图；
图 4 为本发明 VPN链路故障时快速切换的方法的第三实施例的流程示意 图；
图 5为 VLA 列表的示意图；
图 6为另一种 VPLS VPN组网示意图；
图 7为本发明快速切换系统的一实施例的结构示意图。 具体实施方式
本发明的基本思想是： 对 VPN链路故障时通知各个 PE-rs的消息进行了改 进， 以 VLAN或者与 VLAN对应的其他表示形式替代 MAC的完整地址， 从而 使消息更简短， 提高了处理效率。
在 VPN的组网部署中，需要将 MTU-s双归属到不同的 PE-rs上，而且 MTU-s 采用相同的 VLAN作为标识， 可以采用一层 VLAN, 或者多层 VLAN。 在建立 VPLS VPN时， 会在各个 PE-rs中存储本 VPN的 MTU-s的 VLAN转发表项。
以下结合附图和实施例 , 对本发明的技术方案做进一步的详细描述。
如图 2所示， 为本发明 VPN链路故障时快速切换的方法的第一实施例的流 程示意图， 本实施例包括了以下步骤：
步骤 10、 当 PE-rs与 MTU-s之间链路发生故障时， 该 PE-rs向 VPN中各个 PE-rs发送通知消息 ,在发送的通知消息中包含着故障链路所对应的 VLAN信息； 步骤 20、 各个 PE-rs在接收该通知消息后， 根据通知消息中包含的 VLAN 信息对自身存储的 VLAN转发表项进行更新，然后根据 VLAN转发表项向 VPN 中各个网元进行洪泛。 在本实施例中 , 在 PE-rs 自身存储的 VLAN转发表项中包含了该 PE-rs需要 转发哪些 MTU-s发送的业务流量， 这些 MTU-s都是通过 VLAN 进行标识的。
如图 3所示， 为本发明 VPN链路故障时快速切换的方法的第二实施例的流 程示意图， 与上一实施例相比， 本实施例对链路故障的发生情况进行了进一步 的分析， 在步骤 10a中， 当 PE-rs在预定时间内接收不到 MTU-s发送的业务流 量时， 该 PE-rs向 VPN中各个 PE-rs发送通知消息。 预定时间可以由用户根据 实际情况进行设定， 也可以由系统初始化时进行设定。 在预定时间内接收不到 MTU-s 发送的业务流量通常是两种情况造成的， 一种情况是发送业务流量的 MTU-s端口发生故障， 无法发送业务流量； 另一种情况是 MTU-s和 PE-rs之间 的链路发生故障，从而 MTU-s送出的业务流量无法通过链路传送到 PE-rs。这时 由 PE-rs对这两种故障进行监控， 一旦发现在预定时间内没有业务流量， 则认为 发生链路故障， 立刻向其他 PE-rs发送通知消息。
如图 4所示， 为本发明 VPN链路故障时快速切换的方法的第三实施例的流 程示意图， 与第一实施例相比， 本实施例在步骤 10b中描述了 PE-rs自身发生故 障的情况， 由于 PE-rs设备通常有自己的备份 PE-rs, 当 PE-rs发生故障时，备份 PE-rs接管原 PE-rs的工作，从 MTU-s接收业务流量。本发明以此作为判断 PE-rs 自身发生故障的基础， 当备份 PE-rs从 MTU-s接收到业务流量时， 向 VPN中各 个 PE-rs发送通知消息。
以上三个实施例中向 PE-rs发送的通知消息中包括故障链路对应的 MTU-s 的 VLAN信息 , 在 PE-rs之间建立 VPLS VPN时 , 每个 PE-rs会携带本 VPN的 MTU-s的 VLAN列表， 所谓 VLAN列表如图 5所示， 每个 MTU-s都可以接入 多个 CE， PE-r s通过同一层中的不同的 VLAN对 CE进行区分， 还可以通过不 同层的 VLAN对 CE进行区分。 包含故障链路的 VLAN信息的通知消息可包括 多种形式， 例如 VLAN Withdraw 消息， 这种 VLAN Withdraw 消息与 "MAC Withdraw 消息"都属于 LDP Address Withdraw 消息， 但在这种 LDP Address Withdraw中用 VLAN列表替代了 MAC地址， 简化了消息内容， 在处理时会提 高效率。还可以通过 notify消息等其他类型消息来携带故障链路的 VLAN列表。 另外， 除了直接在通知消息中携带 VLAN列表的方式外， 还可以在通知消 息中携带与 VLAN列表对应的信息，例如在建立 VPLS VPN时，同时建立 MTU-s 各个端口的 VLAN列表与每个端口的 ID之间的关系 , 这样就可以在发送的 ID Withdraw消息中只携带更为简短的故障链路的 MTU-s端口对应的 ID, 从而进 一步的简化了通知消息， 提高处理效率。
下面通过图 6中的 VPLS VPN组网图举一具体实例进行说明， 其中 PE-rs2 作为业务流量的目的 PE-rs, 当 MTU-sl与 PE-rsl建立连接的端口发生故障时， PE-rsl在预定的时间 （例如 5ms ) 内接收不到 MTU-sl发送的业务流量， 则判断 该条链路已发生故障， 并生成包含故障链路的 MTU-sl所对应的 VLAN标识的 VLAN Withdraw消息，然后将该 VLAN Withdraw消息发送到 VPN中的各个 PE-rs 上， 在图中 PE3-rs接收到该消息后， 会根据该消息将自身存储的转发表项中对 应于 MTU-sl与 PE-rsl之间链路的内容清除，并发起洪泛，这样就可以使 MTU-sl 上接收的业务流量通过 PE3-rs转发到 PE-rs2上， 从而使用户的业务不致中断。
在转发过程中各个 PE-rs可以根据更新后的转发表项进行转发表项学习， 在 转发表项学习完成时， 停止洪泛， 然后采用学习后的转发表项定义的路径将业 务流量发送到目的 PE-rs。
本发明还提供了一种快速切换系统，如图 7所示， 为本发明快速切换系统的 一实施例的结构示意图， 包括依次连接的故障检测模块 1、 消息构造模块 2、 消 息发送模块 3、 消息接收模块 4和转发表管理模块 5， 其中故障检测模块 1用于 检测 PE-rs与 MTU-s之间链路是否发生故障， 消息构造模块 2用于在 PE-rs与 MTU-s之间链路发生故障时， 构造包含所述故障链路所对应的 VLAN信息的通 知消息； 消息发送模块 3 用于将该通知消息构造模块输出的消息发送给各个 PE-rs; 消息接收模块 4用于接收到来自消息发送模块的所述通知消息后， 通知 转发表管理模块； 转发表管理模块 5用于收到所述通知后， 根据所述 VLAN信 息提供商边缘路由交换机中的该 VLAN 的转发表项， 并将后续的业务流量向 VPN中各个网元进行洪泛。
消息发送模块 3发送的通知消息为 VLAN Withdraw消息、 notify消息或 ID Withdraw消息中的一种。
其中， 故障检测模块 1还可以进一步包括： 第一检测模块 10和第二检测模 块 11。
第一检测模块 10 , 用于当 PE-rs在预定时间内接收不到 MTU-s发送的业务 流量时， 确定 PE-rs与 MTU-s之间链路发生故障。
第二检测模块 11 ,用于当备份 PE-rs从 MTU-s接收到业务流量时，确定 PE-rs 与 MTU-s之间链路发生故障。
其中， 转发表管理模块 5还可以进一步包括： 清除模块 50和转发模块 51。 清除模块 50， 用于根据所述 VLAN信息清除各个 PE-rs中对应的虚拟专用 网络 VPN和 VLAN的转发表项。
转发模块 51 , 用于在转发表项被清除后， 所述 PE-rs将业务流量向 VPN中 各个网元进行洪泛， 在转发过程中各个 PE-rs进行转发表项学习， 在转发表项学 习完成时， 停止洪泛， 并根据学习后的转发表项将业务流量发送到目的 PE-rs。
其中， 快速切换系统还可以进一步包括： 建立模块 6。
建立模块 6， 用于在 VPN建立时， 生成与 VLAN列表对应的 ID列表， 并 通知各个 PE-rs。
在本实施例中，消息发送模块 3能够在故障发生时将包含有故障链路对应的 VLAN信息的消息发送给各个 PE-rs,使 PE-rs能够对自身存储的 VPN和 VLAN 转发表项进行清除， 然后进行洪泛， 从而使业务流量能够顺利地发送到目的 PE-rs, 而且采用 VLAN信息替代现有技术的 MAC地址， 极大地提高了处理效 率。 另外， 在洪泛过程中也在进行转发表项的学习， 当在转发表项学习完成时， 停止洪泛， 恢复正常的数据传送流程。
显然， 本领域的技术人员应该明白， 上述的本发明实施例中的各模块或各 步骤可以用通用的计算装置来实现， 它们可以集中在单个的计算装置上， 或者 分布在多个计算装置所组成的网络上， 可选地， 它们可以用计算装置可执行的 程序代码来实现， 从而， 可以将它们存储在存储装置中由计算装置来执行， 或 者将它们分别制作成各个集成电路模块， 或者将它们中的多个模块或步骤制作 成单个集成电路模块来实现。 这样， 本发明不限制于任何特定的硬件和软件结 合。 应该明白， 这些具体实施中的变化对于本领域的技术人员来说是显而易见 的， 不脱离本发明的精神保护范围。
最后应当说明的是:以上实施例仅用以说明本发明的技术方案而非对其限 制； 尽管参照较佳实施例对本发明进行了详细的说明， 所属领域的普通技术人 员应当理解： 任何对本发明的具体实施方式进行修改或者对部分技术特征进行 等同替换而不脱离本发明精神的技术方案， 其均应涵盖在本发明请求保护的技 术方案范围当中。

Claims

权 利 要 求
1、 一种虚拟专用网 VPN链路故障时快速切换的方法， 其特征在于， 该方法 包括下列步骤：
当提供商边缘路由交换机与多用户单元交换机之间链路发生故障时， 向 VPN中各个提供商边缘路由交换机发送通知消息， 所述通知消息包含所述故障 链路所对应的虚拟局域网 VLAN信息；
所述各个提供商边缘路由交换机接收到所述通知消息后， 根据所述 VLAN 信息更新自身存储的该 VLAN的转发表项，并将后续的业务流量向 VPN中各个 网元进行洪泛。
2、 根据权利要求 1所述的 VPN链路故障时快速切换的方法， 其特征在于， 所述当提供商边缘路由交换机与多用户单元交换机之间链路发生故障时， 向 VPN中各个提供商边缘路由交换机发送通知消息的操作具体为：
当所述提供商边缘路由交换机在预定时间内接收不到多用户单元交换机发 送的业务流量时， 向 VPN中各个提供商边缘路由交换机发送通知消息。
3、 根据权利要求 1所述的 VPN链路故障时快速切换的方法， 其特征在于， 所述当提供商边缘路由交换机与多用户单元交换机之间链路发生故障时， 向 VPN中各个提供商边缘路由交换机发送通知消息的操作具体为：
当备份提供商边缘路由交换机从多用户单元交换机接收到业务流量时， 向 VPN中各个提供商边缘路由交换机发送通知消息。
4、根据权利要求 2或 3所述的 VPN链路故障时快速切换的方法， 其特征在 于， 所述向 VPN中各个提供商边缘路由交换机发送通知消息具体为：
向 VPN 中各个提供商边缘路由交换机发送 VLAN Withdraw 消息， 所述 VLAN Withdraw消息包含所述故障链路对应的 VLAN列表。
5、根据权利要求 2或 3所述的 VPN链路故障时快速切换的方法， 其特征在 于， 所述向 VPN中各个提供商边缘路由交换机发送通知消息具体为：
向 VPN中各个提供商边缘路由交换机发送 notify消息， 所述 notify消息包 含所述故障链路对应的 VLAN列表。
6、根据权利要求 2或 3所述的 VPN链路故障时快速切换的方法， 其特征在 于， 所述向 VPN中各个提供商边缘路由交换机发送通知消息具体为：
向 VPN 中各个提供商边缘路由交换机发送 ID Withdraw 消息， 所述 ID Withdraw消息包含所述故障链路的 VLAN列表对应的 ID列表。
7、 根据权利要求 6所述的 VPN链路故障时快速切换的方法， 其特征在于， 还包括： 在 VPN建立时， 生成与 VLAN列表对应的 ID列表， 并通知各个提供 商边缘路由交换机。
8、 根据权利要求 1所述的 VPN链路故障时快速切换的方法， 其特征在于， 所述各个提供商边缘路由交换机接收到所述通知消息后， 根据所述 VLAN信息 更新提供商边缘路由交换机中的 VLAN转发表项的操作具体为：
所述各个提供商边缘路由交换机接收到所述通知消息后， 根据所述 VLAN 信息清除自身存储的对应 VPN和 VLAN转发表项。
9、 根据权利要求 1所述的 VPN链路故障时快速切换的方法， 其特征在于， 在转发过程中各个提供商边缘路由交换机进行转发表项学习， 在转发表项学习 完成时， 停止洪泛， 并根据学习后的转发表项将业务流量发送到目的提供商边 缘路由交换机。
10、 一种快速切换系统， 其特征在于， 该切换系统包括：
故障检测模块，用于检测提供商边缘路由交换机与多用户单元交换机之间链 路是否发生故障；
消息构造模块， 与所述故障检测模块相连，用于在提供商边缘路由交换机与 多用户单元交换机之间链路发生故障时， 构造包含所述故障链路所对应的虚拟 局域网络 VLAN信息的通知消息；
消息发送模块， 与所述消息构造模块相连，用于将所述通知消息构造模块输 出的通知消息发送给各个提供商边缘路由交换机；
消息接收模块， 与所述消息发送模块相连， 用于接收到所述通知消息后， 通 知转发表管理模块；
转发表管理模块， 与所述消息接收模块相连， 用于收到所述通知后， 根据所 述 VLAN信息提供商边缘路由交换机中的该 VLAN的转发表项， 并将后续的业 务流量向 VPN中各个网元进行洪泛。
11、 根据权利要求 10所述的快速切换系统， 其特征在于， 所述故障检测模 块包括：
第一检测模块，用于当所述提供商边缘路由交换机在预定时间内接收不到多 用户单元交换机发送的业务流量时， 确定提供商边缘路由交换机与多用户单元 交换机之间链路发生故障；
第二检测模块，用于当备份提供商边缘路由交换机从多用户单元交换机接收 到业务流量时， 确定提供商边缘路由交换机与多用户单元交换机之间链路发生 故障。
12、 根据权利要求 10所述的快速切换系统， 其特征在于， 所述通知消息为 VLAN Withdraw消息、 notify消息或 ID Withdraw消息中的一种。
13、 根据权利要求 10所述的快速切换系统， 其特征在于， 所述系统还包括： 建立模块， 用于在 VPN建立时， 生成与 VLAN列表对应的 ID列表， 并通 知各个提供商边缘路由交换机。
14、 根据权利要求 10所述的快速切换系统， 其特征在于， 所述转发表管理 模块包括：
清除模块， 用于根据所述 VLAN信息清除各个提供商边缘路由交换机中对 应的虚拟专用网络 VPN和 VLAN的转发表项；
转发模块， 用于在转发表项被清除后， 所述各个提供商边缘路由交换机将 业务流量向 VPN中各个网元进行洪泛， 在转发过程中各个提供商边缘路由交换 机进行转发表项学习， 在转发表项学习完成时， 停止洪泛， 并根据学习后的转 发表项将业务流量发送到目的提供商边缘路由交换机。
PCT/CN2007/002392 2007-02-02 2007-08-09 Method and system for switching rapidly when there is a failure of virtual private network link path Ceased WO2008095360A1 (en)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN2007100635230A CN101237343B (zh) 2007-02-02 2007-02-02 故障时快速切换的方法及快速切换系统
CN200710063523.0 2007-02-02

Publications (1)

Publication Number Publication Date
WO2008095360A1 true WO2008095360A1 (en) 2008-08-14

Family

ID=39681248

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2007/002392 Ceased WO2008095360A1 (en) 2007-02-02 2007-08-09 Method and system for switching rapidly when there is a failure of virtual private network link path

Country Status (2)

Country Link
CN (1) CN101237343B (zh)
WO (1) WO2008095360A1 (zh)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8171156B2 (en) * 2008-07-25 2012-05-01 JumpTime, Inc. Method and system for determining overall content values for content elements in a web network and for optimizing internet traffic flow through the web network
CN101695030B (zh) * 2009-10-23 2015-06-03 中兴通讯股份有限公司 数据流传输方法及装置
CN102185712B (zh) * 2011-04-29 2015-10-21 中兴通讯股份有限公司 Vpls网络和以太环网的倒换方法及装置
CN102546414B (zh) * 2012-01-06 2015-04-22 北京星网锐捷网络技术有限公司 一种报文转发方法、装置以及系统
CN104734874B (zh) * 2013-12-20 2018-04-27 华为技术有限公司 一种确定网络故障的方法及装置
CN105515970B (zh) * 2015-12-16 2019-09-03 北京华为数字技术有限公司 一种用于传输报文的方法与装置
CN112202668B (zh) * 2020-11-02 2022-08-05 儒安物联科技集团有限公司 局域网、广域网故障转移备份系统及其方法

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1852214A (zh) * 2005-11-02 2006-10-25 华为技术有限公司 一种虚拟专用网络的路由方法
WO2007012239A1 (en) * 2005-07-28 2007-02-01 Huawei Technologies Co., Ltd A method for switching the serving services of virtual private lan and a system thereof

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2007012239A1 (en) * 2005-07-28 2007-02-01 Huawei Technologies Co., Ltd A method for switching the serving services of virtual private lan and a system thereof
CN1852214A (zh) * 2005-11-02 2006-10-25 华为技术有限公司 一种虚拟专用网络的路由方法

Also Published As

Publication number Publication date
CN101237343B (zh) 2011-08-10
CN101237343A (zh) 2008-08-06

Similar Documents

Publication Publication Date Title
CN101047601B (zh) 基于vpls的双归属网络的实现方法及系统
EP2675121B1 (en) Vpls fast rerouting method and device
CN101931520B (zh) 一种切换方法及系统
US9019814B1 (en) Fast failover in multi-homed ethernet virtual private networks
US7558878B2 (en) Optimal sync for rapid spanning tree protocol
CN101710877B (zh) 基于伪线的业务流量处理方法、设备和系统
CN102025541B (zh) 一种实现组播保护的方法及系统
CN101330424B (zh) 一种虚拟专用网服务故障处理的方法、系统及装置
US20220174006A1 (en) Method for EVPN and VPLS Active-Active Integration, Device, and System
US20130272114A1 (en) Pseudo wire switching method and device
CN111064596B (zh) 对于用于多宿主节点故障的bum流量的节点保护
CN106487675A (zh) 用于evpn中具有链路故障时的bum流量的出口保护
WO2009033428A1 (en) Method, system and device for removing media access control address
WO2007012239A1 (en) A method for switching the serving services of virtual private lan and a system thereof
WO2011120301A1 (zh) 双归保护倒换方法、装置和系统
CN101610221B (zh) 一种stp切换时ip单播平滑切换的方法及装置
CN103607317A (zh) 二层环路检测方法和装置及通信系统
WO2008119300A1 (en) A protecting method and device for ethernet tree service
WO2008080312A1 (en) Convergence method, device, system of all connection network as well as dual home device
WO2009092241A1 (zh) 基于环路的报文传送方法、网络系统和节点设备
WO2008095360A1 (en) Method and system for switching rapidly when there is a failure of virtual private network link path
CN101155109A (zh) 一种以太网交换系统及设备
CN115118545A (zh) 以太网虚拟专用网多播网络中的组管理协议主机移动性
EP2738997B1 (en) Method and device for managing mac address table entries in trill network
CN102185712B (zh) Vpls网络和以太环网的倒换方法及装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07785299

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 07785299

Country of ref document: EP

Kind code of ref document: A1