[go: up one dir, main page]

WO2008037210A1 - Procédé et dispositif servant à transférer un message dans un réseau local privé virtuel - Google Patents

Procédé et dispositif servant à transférer un message dans un réseau local privé virtuel Download PDF

Info

Publication number
WO2008037210A1
WO2008037210A1 PCT/CN2007/070735 CN2007070735W WO2008037210A1 WO 2008037210 A1 WO2008037210 A1 WO 2008037210A1 CN 2007070735 W CN2007070735 W CN 2007070735W WO 2008037210 A1 WO2008037210 A1 WO 2008037210A1
Authority
WO
WIPO (PCT)
Prior art keywords
packet
virtual
virtual switching
switching instance
local area
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2007/070735
Other languages
English (en)
Chinese (zh)
Inventor
Xindong Teng
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huawei Technologies Co Ltd
Original Assignee
Huawei Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Huawei Technologies Co Ltd filed Critical Huawei Technologies Co Ltd
Publication of WO2008037210A1 publication Critical patent/WO2008037210A1/fr
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H04L12/46—Interconnection of networks
    • H04L12/4641—Virtual LANs, VLANs, e.g. virtual private networks [VPN]

Definitions

  • the present invention relates to a virtual private local area network, and more particularly to a message forwarding method and apparatus for a virtual private local area network shared by multiple virtual switching instances by setting a shared virtual switching instance.
  • Virtual Private LAN Services is a Layer 2 Virtual Private Network (VPN) technology that provides similar LANs over a Multi Protocol Label Switching (MPLS) network.
  • MPLS Multi Protocol Label Switching
  • LAN Local Area Network
  • the function of the service allows users to access the network from multiple geographically dispersed points and access each other as if they were directly connected to the LAN.
  • the role of VPLS is a virtual LAN switch.
  • FIG. 1 is a typical networking diagram of VPLS.
  • the interface where the user edge device (CE, Custom Edge) resides is added to the virtual switch instance (VSI, Virtual Switch Instance) in the VPLS.
  • the Provider Edge is connected to each other through PW (Pseudo Wire) to form a simulated LAN for the client.
  • PW Pseudo Wire
  • Each PE performs user MAC address learning (including the CE side and the PW side) in the virtual switching instance.
  • the item is published so that CE users who join the same virtual switching instance can access each other at the second layer.
  • the VPLS PW usually uses an MPLS tunnel or any other tunnel, such as GRE, L2TPV3, and TE.
  • the function of the VPLS PW is to transparently transmit Ethernet packets.
  • QinQ two-layer label technology, 802.lQ-in-802.lQ
  • QinQ also known as the virtual LAN stack (VLAN-Stack)
  • VLAN-Stack virtual LAN stack
  • the private network VLAN TAG is encapsulated in the public network VLAN TAG.
  • the packet carries the two layers of TAGs to traverse the backbone network of the service provider.
  • the public network VLAN TAG is stripped off at the edge of the service provider's backbone network to restore the private network VLAN TAG. Therefore, the user is provided with a relatively simple single layer VLAN TAG tunnel.
  • an individual or enterprise user can access the Internet access network through a virtual private LAN access to a broadband access server (BRAS, Broadband Remote Access Server) that acts as a remote access authentication device.
  • BRAS Broadband Remote Access Server
  • a user or enterprise user can perform Layer 2 access within the same virtual switching instance through the virtual private LAN.
  • the user can also be isolated by VLANs.
  • all users can access the same broadband access server device, and the broadband access server device can assign users IP addresses of different network segments, and the user accesses the broadband access server according to the IP address and accesses the Internet network. .
  • users belonging to the same virtual switching instance can access each other through the virtual private LAN.
  • the PE and BRAS are required.
  • a VLAN sub-interface is created. Different sub-interfaces need to be added to VSI1 and VSI2.
  • the user data carries the user VLAN, the user data of the PE device to the BRAS device becomes QinQ packets (with two layers of labels).
  • the broadband access server needs to be terminated.
  • the QinQ message is the QinQ message.
  • the main purpose of the present invention is through the operator edge device in the virtual private local area network
  • a shared virtual switching instance (Super-VSI) is set up to implement interworking between multiple virtual switching instances and a shared virtual switching instance to reduce the complexity of configuration and management of virtual private local area network access to the three-layer network.
  • users of different virtual switching instances are isolated at Layer 2 by sharing virtual switching instances, but Layer 3 mutual access can be easily implemented.
  • a packet forwarding method for a virtual private local area network includes:
  • the shared virtual switching instance forwards the packet to its destination.
  • the packet forwarding device of the virtual private local area network is provided by the embodiment of the present invention, including: at least one shared virtual switching instance, configured with multiple members, the member being at least one virtual switching instance in the virtual private local area network;
  • the shared virtual switching instance is configured to receive a packet from the virtual switching instance in the virtual private local area network; and when the virtual switching instance from the packet is the configured member, the packet is sent to the packet Destination forwarding.
  • the shared virtual switching instance can implement Layer 2 isolation in different virtual switching instances, but can implement Layer 3 mutual access. Applications such as security-based considerations prevent Layer 2 attacks between virtual switching instances.
  • the text forwarding device uniformly controls whether users of different virtual switching instances can access each other;
  • the virtual private instance network that is, the three-layer logical interface, implements the virtual private local area network access to the three-layer network, and solves the problem of not sharing the virtual exchange instance when accessing, for each virtual exchange instance. All build a related three-tier logical interface, and And configuring an IP address will consume a lot of IP addresses.
  • FIG. 1 is a typical networking diagram of a virtual private local area network in the prior art
  • FIG. 2 is a schematic diagram of a user accessing a broadband access server through a virtual private local area network in the prior art
  • FIG. 3 is a schematic diagram of a user accessing a broadband access server via a virtual private local area network using the present invention
  • FIG. 4 is a schematic diagram of implementing three-layer access by different virtual switching instance users through a virtual private local area network and a shared virtual switching instance by using the present invention. Mode for carrying out the invention
  • the core content of the present invention is that, by setting a shared virtual switching instance on a packet forwarding device of a virtual private local area network (for example, a carrier edge device PE), multiple virtual switching instances are interconnected with one shared virtual switching instance to reduce virtuality.
  • a virtual private local area network for example, a carrier edge device PE
  • multiple virtual switching instances are interconnected with one shared virtual switching instance to reduce virtuality.
  • the complexity of the configuration and management of the dedicated local area network to the three-layer network; in addition, the address resolution protocol (ARP) proxy function and the three-layer logical interface can be set up on the packet forwarding device provided with the shared virtual switching instance. Users of different virtual switching instances are connected in Layer 2 and Layer 3 access.
  • ARP address resolution protocol
  • the packet forwarding method of the virtual private local area network mainly includes the following steps: setting a packet forwarding device in the virtual private local area network, where the packet forwarding device includes at least one shared virtual switching instance;
  • the virtual virtual switching instance When a user in the virtual private local area network sends a text message through the virtual switching instance to which the user belongs, that is, when the user sends a text through the virtual switching instance of the member to which the user belongs, the virtual virtual switching instance is forwarded to the destination end of the text.
  • the shared virtual switching instance in the present invention is a shared virtual switching instance that can share multiple virtual switching instances.
  • Super-VSI the Super-VSI is set on the packet forwarding device, that is, the carrier edge device PE in this embodiment.
  • a Super-VSI packet forwarding device is set here. It is called Super Carrier Edge Device (Super-PE).
  • This member can be called a member virtual switching instance (Sub-VSI), that is, multiple virtual switching instances in the virtual private local area network, which can be all in the virtual private local area network.
  • the virtual switch instance is configured to share members of the virtual switch instance, or you can configure only a part.
  • the method of configuration there is no limitation in the present invention. As long as the sharing relationship between the Super-VSI and the Sub-VSI is established, all the virtual switching instances of the member can communicate with the shared virtual switching instance in the virtual private local area network. can.
  • Example 1 A user of a virtual private LAN requests authentication online:
  • FIG. 3 is a schematic diagram of realizing virtual private local area network users accessing the Internet through a broadband access server by using Super-VSI.
  • Super-PE is an edge device connected to a virtual private LAN and a broadband access server.
  • Super-VSI is configured on the Super-PE.
  • the Super-VSI includes VSI1 and VSI2 in the virtual private local area network are used as member virtual switching instances. This is not limited to this. It can include all virtual switching instances.
  • the Super-VSI includes VSI1 and VSI2 as examples.
  • the interface of the super-PE connected to the server is added to the Super-VSI, so that users of VSI1 and VSI2 can send the packet to the Super-VSI of the Super-PE and forward it to the broadband access server for authentication and Internet access.
  • the present invention only replaces the virtual switching instance connected with the BRAS in the prior art by using a shared virtual switching instance, that is, Super-VSI.
  • the authentication is implemented on the Internet. Therefore, the specific access process is not mentioned here.
  • the super-PE interface connected to the BRAS can be configured as a QinQ interface, and the user packets of different virtual switching instances are mapped to different outer VLANs.
  • QinQ terminates and distinguishes users. For example, you can distinguish different VLANs to which users belong.
  • a special case is that when the Super-VSI is processed, all the data without VLANs sent from other virtual switching instances that are not members of the Super-VSI are uniformly used to perform QinQ encapsulation.
  • the interface between the Super-PE and the broadband access server is the common physical interface.
  • the specific implementation method is:
  • Step 1 Configure the Super-VSI on the Super-PE and configure the member Sub-VSI of the Super-VSI.
  • VSI1 and VSI2 are configured as virtual exchange instances of the member.
  • Step 2 Establish related elements of the virtual private local area network of the PE1, the PE2, and the super-PE.
  • the PE may be all the PEs in the virtual private local area network, and is not limited to PE1 and PE2.
  • PE3 may be further included.
  • PE1 and PE2 are used as examples.
  • the process Specifically, the VPLS PW tunnels are established, and the interfaces related to the PC1 and PC2 on the PE1 and the PE2 are added to the corresponding VSIs. This process is the existing processing flow of the VPLS, and is not described here.
  • Step 3 The user PC2 sends an authentication request message to the Super-PE as the packet forwarding device via the virtual switching instance VSI2 to which the user belongs.
  • Step 4 Add the interface connected to the broadband access server to the Super-VSI.
  • Configure the interface type as a QinQ interface or a common interface.
  • For the QinQ interface you need to configure the mapping between the VSI and the outer label.
  • Step 5 After receiving the authentication request packet sent by the user PC2 of the virtual private local area network, the Super-PE checks whether the VSI2 to which it belongs is a member of the Super-VSI. If yes, the Super-VSI is the packet forwarding device. And all the members of the configuration, the sub-VSI (VSI1 and VSI2), find the MAC forwarding entry, and find the corresponding outgoing interface to send, in this embodiment, the interface connected to the access server;
  • the request packet is encapsulated in QinQ by using the default virtual LAN label and then forwarded.
  • the interface corresponding to the Super-VSI and all the member Sub-VSIs (including the PW but not the interface that receives the current packet)
  • the MAC address learning is performed in the range of the virtual switching instance, and the related information is saved. This process is also the existing processing flow of the virtual private local area network, and will not be described here.
  • the interface connected to the access server such as the BRAS
  • the interface type is configured as a QinQ interface or a common interface.
  • QinQ interface you need to configure the mapping between the VSI and the outer label.
  • common interface you can configure the default outer label of VSI user packets without VLANs.
  • users of different virtual switching instances of the VPLS network can easily access the BRAS and access the Internet through the Super-VSI, thereby eliminating the need to set multiple sub-interfaces corresponding to different virtual switching instances on the BRAS, and also reduce The number of virtual switching instances created on the PE reduces the complexity of configuration and management.
  • Example 2 Users requesting mutual access of different virtual switching instances in the virtual private local area network:
  • the packet forwarding device that is, the Super in this embodiment -
  • the arp proxy function is enabled at the PE, that is, the ARP proxy unit can be included in the Super-PE.
  • the arp proxy function refers to the process of proxying the arp request message in the different broadcast domains that are isolated by the user.
  • the arp proxy function needs to be implemented for users in the Sub-VSI of all members of the Super-VSI.
  • the proxy asks the user to send the text to the local, that is, the packet forwarding device, and forwards it locally.
  • PC1 and PC2 in the figure have IP addresses of IP1 and IP2, which belong to the same network segment.
  • ARP request packets sent by PC1 cannot reach PC2. Therefore, PC1 will not receive the arp response message of PC2, so the MAC address of PC2 cannot be obtained, so PC1 cannot send IP packets to PC2.
  • the Layer 3 logical interface associated with the Super-VSI is configured, and the IP address and MAC address of the Layer 3 logical interface are configured.
  • the members of the Super-VSI include VSI1 and VSI2.
  • the arp request message (broadcast message) of PC1 can be sent to Super-PE, and the super-PE starts the arp proxy function.
  • the IP address of PC1 is checked as the IP address of the proxy, it is in the range of Super-VSI.
  • the internal ie, VSI1 and VSI2
  • the arp request message will be sent to PC2 through PE2.
  • PC2 sends back an arp response message to Super-PE, and then Super-PE sends back arp to PCI through arp proxy function.
  • inform "PC2's MAC address” please note that at this time, Super-PE tells The MAC address of the PCI is not the real MAC address of the PC2, but the MAC address of the Layer 3 logical interface. This completes the Layer 2 isolation.
  • the PC1 sends an IP data packet to the PC2.
  • the IP data packet will be received locally. It is sent to the Layer 3 logical interface for processing, and is forwarded to PC2 by checking the routing table.
  • PC1 and PC2 implement Layer 3 access.
  • the specific implementation method is:
  • Step 1 Configure Super-VSI on the Super-PE and configure the member Sub-VSI of the Super-VSI.
  • VSI1 and VSI2 are configured as virtual exchange instances of the member.
  • Step 2 Set at least one Layer 3 logical interface related to the Super-VSI, and configure an IP address and a MAC address of the Layer 3 logical interface.
  • Step 3 Establish related elements of the virtual private local area network of the PE1, the PE2, and the super-PE.
  • all the PEs in the virtual private local area network may be used, and are not limited to PE1 and PE2, and may include, for example, PE3.
  • PE1 is used.
  • the PE2 is used as an example.
  • the process includes the establishment of a mutual VPLS PW tunnel.
  • the interfaces related to the PC1 and PC2 on PE1 and PE2 are added to the corresponding VSI. This process is the existing processing flow of the VPLS.
  • Step 4 The user PC1 of the virtual private local area network sends an arp request message to access PC2, where PC1 belongs to VSI1 at PE1, its IP address is IP1, PC2 belongs to VSI2 at PE2, its IP address is IP2, and the arp request
  • the virtual switching instance VSI1 to which the user PC1 belongs is sent to the text forwarding device Super-PE;
  • Step 5 The packet forwarding device Super-PE checks the user PC2, that is, whether the IP address of the destination user is the IP address of the proxy, that is, whether it is the IP address of the user of the member virtual switching instance, and if so, proceed Next steps.
  • Step 6 The Super-PE performs the arp proxy function, and the arp proxy function needs to implement proxying for users in the Sub-VSI of all members of the Super-VSI.
  • the super-PE checks the MAC address corresponding to the IP address of the destination user PC2 in the arp request packet, and the process can perform the search by using the shared virtual switching instance and its configured members. If not, the arp request is sent. The message is sent to the shared virtual switching instance Super-VSI and all its members Sub-VSI (can be requested in addition to the requesting user);
  • Step 7 The Super-PE sends an arp response message to the PC1 to inform the PC2 of the MAC address, here, The MAC address is actually the MAC address of the Layer 3 logical interface.
  • Step 8 PC1 sends a data packet to the Super-PE.
  • the Super-PE sends the data packet to the Layer 3 logical interface, and then forwards it to PC2 through the lookup routing table.
  • This example is similar to the second example. It is accessed at Layer 3. The difference is that when the packet forwarding device checks the IP address of the destination user as the IP address of the Layer 3 logical interface, it directly sends back the arp response message to request the user to When a data packet is sent, it is sent directly to the Layer 3 logical interface and forwarded through the lookup routing table.
  • the right side of the Super-PE device is the IP network, and the left side is the virtual private LAN.
  • the virtual private LAN For example, PC1 and PC2
  • the IP address belongs to the same network segment as IP1 and IP2, so PC1 and PC2 can Access to users in the three-tier IP network.
  • the specific implementation method is:
  • Step 1 Configure Super-VSI on the Super-PE and configure the member Sub-VSI of the Super-VSI.
  • VSI1 and VSI2 are configured as virtual exchange instances of the member.
  • Step 2 Establish related elements of the virtual private local area network of the PE1, the PE2, and the super-PE.
  • the PE may be all the PEs in the virtual private local area network, and is not limited to PE1 and PE2.
  • PE3 may be further included.
  • PE1 and PE2 are used as an example.
  • the process includes the establishment of mutual VPLS PW tunnels.
  • the interfaces related to users PC1 and PC2 on PE1 and PE2 are added to the corresponding VSI. This process is the existing processing flow of VPLS. No longer;
  • Step 3 Set at least one Layer 3 logical interface VSI-interface associated with the Super-VSI on the packet forwarding device, and configure an IP address on the Layer 3 logical interface that belongs to the same network segment as the IP address of the Sub-VSI user. And configuring the MAC address; in addition, the Super-PE needs to implement the routing function, that is, the outbound interface can be found as the VSI-interface through the destination address such as IP1;
  • Step 4 The user of the virtual private local area network, for example, the PC1 sends the data, and the virtual exchange instance VSI1 to which the user belongs is sent to the packet forwarding device Super-PE; the MAC address of the packet; if the judgment result is yes And the packet forwarding device sends the access request packet to the third layer for processing, and searches the routing table for forwarding;
  • the packet forwarding device Super-PE searches for the MAC address corresponding to the destination IP address in the Super-VSI and all member Sub-VSI ranges and sends a message through the corresponding VSI; When present, the packet forwarding device Super-PE sends an arp request message to the shared virtual instance Super-VSI and its member Sub-VSI to find the MAC address.
  • the virtual private local area network can be accessed to the three-layer network through the Super-VSI.
  • the Super-PE must find its outgoing interface VSI-interface through the destination address to implement the routing function.
  • the virtual private local area network of the present invention can create multiple Super-VSIs and multiple VSI-interfaces on a packet forwarding device, such as a carrier edge device, and apply in a single Super-VSI and VSI-interface.
  • a packet forwarding device such as a carrier edge device
  • access between different VSI-interfaces is handled according to the access of the normal Layer 3 interface, that is, general route forwarding is performed.
  • the present invention further provides a packet forwarding system and a packet forwarding device of a virtual private local area network, where the system includes: multiple clients, the multiple clients may be distributed in different geographical locations, The client may be connected to the virtual private local area network through at least one carrier edge device in each geographical location; at least one packet forwarding device, in the embodiment of the present invention, is a Super-PE, the newspaper
  • the file forwarding device includes at least one shared virtual switching instance Super-VSI, configured to forward a user request in the virtual private local area network, where the shared virtual switching instance Super-VSI multiple virtual switching instances are used for The shared virtual switching instances are interconnected, which are VSI1 and VSI2 in this embodiment.
  • the packet forwarding device further includes an interface connected to the access server, and the request packet of the user of the virtual private local area network is forwarded to the office through the interface through the processing of the shared virtual switching instance of the packet forwarding device.
  • the access server is authenticated and connected to the Internet.
  • the interface can be configured as a QinQ interface.
  • the interface can be configured as a common interface.
  • the interface can be configured as a common interface.
  • the text forwarding device further includes an arp proxy unit that proxyes all members of the shared virtual switching instance, and the arp request message of the user according to different virtual switching instances of the virtual private local area network is in the sharing.
  • the virtual switch instance and all its members find the destination user MAC address and isolate it at Layer 2 to implement Layer 3 mutual access.
  • the packet forwarding device further includes at least one Layer 3 logical interface, where an IP address belonging to the same network segment as the user of the virtual private local area network is configured, so that the user of the virtual private local area network implements three Layer access.
  • the present invention is a packet forwarding device in a virtual private local area network, for example, setting a shared virtual switching instance on an operator edge device, and starting the arp proxy function and creating a three-layer logical interface to complete the virtual private operation according to requirements.
  • Users of different virtual switching instances in the local area network access the external network or access each other without creating too many virtual switching instances on the carrier edge device and creating many sub-interfaces between the carrier edge device and the external network.
  • the configuration and management of the virtual private local area network is simplified, which makes it easier for users in the virtual private local area network to access the external network and isolate or access each other.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

La présente invention concerne un procédé et un dispositif servant à transférer un message dans un réseau local privé virtuel. Le procédé comprend les étapes consistant à : recevoir un message d'une instance de commutation virtuelle (VSI) dans le réseau local privé virtuel; si la VSI d'où provient le message est membre d'une super instance de commutation virtuelle (Super-VSI) définie, la Super-VSI transfère le message à son port de destination. Selon l'invention, le procédé consiste à définir la Super-VSI, activer la fonction d'agent ARP comme il convient et créer des interfaces logiques de couche 3, de façon à ce que les utilisateurs de différentes VSI dans le réseau local privé virtuel puissent avoir accès à un réseau externe ou accéder les uns aux autres, sans créer davantage de VSI au niveau des périphéries du fournisseur (PE). Par conséquent, la définition et la gestion du réseau local privé virtuel sont simplifiées, et il est plus pratique pour l'utilisateur dans le réseau local privé virtuel d'avoir accès au réseau externe ou d'accéder les uns aux autres.
PCT/CN2007/070735 2006-09-28 2007-09-20 Procédé et dispositif servant à transférer un message dans un réseau local privé virtuel Ceased WO2008037210A1 (fr)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN200610159958.0 2006-09-28
CNB2006101599580A CN100514929C (zh) 2006-09-28 2006-09-28 一种虚拟专用局域网的报文转发方法及装置

Publications (1)

Publication Number Publication Date
WO2008037210A1 true WO2008037210A1 (fr) 2008-04-03

Family

ID=37779020

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2007/070735 Ceased WO2008037210A1 (fr) 2006-09-28 2007-09-20 Procédé et dispositif servant à transférer un message dans un réseau local privé virtuel

Country Status (2)

Country Link
CN (1) CN100514929C (fr)
WO (1) WO2008037210A1 (fr)

Cited By (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102368735A (zh) * 2011-11-07 2012-03-07 杭州华三通信技术有限公司 一种vpls报文处理方法及设备
CN113923162A (zh) * 2021-10-09 2022-01-11 新华三信息安全技术有限公司 一种报文转发方法、装置、设备及存储介质
CN115334045A (zh) * 2022-08-12 2022-11-11 迈普通信技术股份有限公司 报文转发方法、装置、网关设备及存储介质

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN100466590C (zh) * 2007-03-26 2009-03-04 中兴通讯股份有限公司 一种V_Switch透传数据实现负荷分担的方法
CN101197779B (zh) * 2007-12-27 2012-10-17 华为技术有限公司 一种提升地址解析协议代理发包效率的方法、装置和系统
CN101631129B (zh) * 2009-08-18 2013-06-05 中兴通讯股份有限公司 组播数据转发方法及装置
CN103812959B (zh) * 2012-11-15 2017-05-31 中国电信股份有限公司 集中管理ip地址的方法与系统
WO2015029048A1 (fr) * 2013-08-29 2015-03-05 Hewlett-Packard Development Company, L.P. Configuration automatique d'un routeur virtuel
CN104702708B (zh) * 2013-12-06 2018-04-27 华为技术有限公司 获取地址解析协议信息的方法、设备、系统及网络虚拟化端点
CN104954255B (zh) * 2014-03-24 2019-12-24 中兴通讯股份有限公司 一种vpn报文处理方法及装置
CN116418631A (zh) * 2023-03-09 2023-07-11 新华三技术有限公司 一种组播传输方法以及装置

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1414749A (zh) * 2002-08-23 2003-04-30 华为技术有限公司 一种三层虚拟私有网络及其构建方法
US20040151181A1 (en) * 2003-02-04 2004-08-05 Chu Thomas P. Methods and systems for providing MPLS-based layer-2 virtual private network services
US20050190757A1 (en) * 2004-02-27 2005-09-01 Cisco Technology Inc. Interworking between Ethernet and non-Ethernet customer sites for VPLS

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1414749A (zh) * 2002-08-23 2003-04-30 华为技术有限公司 一种三层虚拟私有网络及其构建方法
US20040151181A1 (en) * 2003-02-04 2004-08-05 Chu Thomas P. Methods and systems for providing MPLS-based layer-2 virtual private network services
US20050190757A1 (en) * 2004-02-27 2005-09-01 Cisco Technology Inc. Interworking between Ethernet and non-Ethernet customer sites for VPLS

Cited By (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102368735A (zh) * 2011-11-07 2012-03-07 杭州华三通信技术有限公司 一种vpls报文处理方法及设备
CN113923162A (zh) * 2021-10-09 2022-01-11 新华三信息安全技术有限公司 一种报文转发方法、装置、设备及存储介质
CN113923162B (zh) * 2021-10-09 2023-04-18 新华三信息安全技术有限公司 一种报文转发方法、装置、设备及存储介质
CN115334045A (zh) * 2022-08-12 2022-11-11 迈普通信技术股份有限公司 报文转发方法、装置、网关设备及存储介质
CN115334045B (zh) * 2022-08-12 2023-12-19 迈普通信技术股份有限公司 报文转发方法、装置、网关设备及存储介质

Also Published As

Publication number Publication date
CN100514929C (zh) 2009-07-15
CN1921441A (zh) 2007-02-28

Similar Documents

Publication Publication Date Title
WO2008037210A1 (fr) Procédé et dispositif servant à transférer un message dans un réseau local privé virtuel
Lasserre et al. Framework for data center (DC) network virtualization
Del Piccolo et al. A survey of network isolation solutions for multi-tenant data centers
Narten et al. Problem statement: Overlays for network virtualization
US9900263B2 (en) Non-overlay resource access in datacenters using overlay networks
RU2544766C2 (ru) Способ, устройство и система маршрутизации данных между сегментами сетей
CN104396192B (zh) 不对称网络地址封装
EP1413094B1 (fr) Fonctionnalite de serveur distribuee pour lan emule
US12081367B2 (en) Generating route target values for virtual private network routes
CN106101023B (zh) 一种vpls报文处理方法及设备
GB2497202A (en) Transmitting frames between, possibly different, local VLANs by encapsulating frames for global VLAN tunnel
WO2011032472A1 (fr) Procédé et système d'implémentation de réseau privé virtuel
WO2011032473A1 (fr) Procédé et système d'implémentation de réseau privé virtuel
WO2009094928A1 (fr) Procédé et équipement de transmission d'un message basé sur le protocole de tunnel de niveau 2
WO2007112691A1 (fr) Système, procédé et dispositif réseau permettant à un client de réseau privé virtuel (vpn) d'accéder à un réseau public
CN116547953A (zh) 由网络结构控制平面实施段间流量策略
CN105453513A (zh) 报文转发方法、转发表项下发方法及网络设备
JP4692258B2 (ja) ルータ装置及び通信システム
CN112751767B (zh) 路由信息传输方法及装置、数据中心互联网络
JP4011528B2 (ja) ネットワーク仮想化システム
CN1822598A (zh) Ip到虚拟专用局域网业务的互通
WO2014186957A1 (fr) Système de réseau multi-locataires
CN112751758B (zh) 路由信息传输方法及装置、数据中心互联网络
CN218920438U (zh) 一种基于vxlan的互联网接入控制系统
CN115604056B (zh) 下游vxlan标识符的高效存储实现

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 07816926

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 07816926

Country of ref document: EP

Kind code of ref document: A1