WO2009086757A1

WO2009086757A1 - Method and device for controlling message forwarding

Info

Publication number: WO2009086757A1
Application number: PCT/CN2008/073131
Authority: WO
Inventors: Shi Tang
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2007-12-27
Filing date: 2008-11-20
Publication date: 2009-07-16
Also published as: CN101217463A; CN101217463B

Abstract

The technical field of the invention relates to telecommunications, and in particular to a method and device for controlling message forwarding. The method comprises: dividing a first broadcast domain and a second broadcast domain; maintaining a first broadcast domain identifier at the interfaces of the public network side, while maintaining a second broadcast domain identifier at the interfaces of the accessing side; receiving the forwarding message, studying the source media access control (MAC) address of the message so as to achieve a corresponding relationship between the source MAC address, the receiving interface and the broadcast domain identifier, and mapping said broadcast domain identifier, whereafter an item from a source MAC address corresponding to the broadcast domain identifier is forwarded. The device comprises a division module, a preservation module, a receiving module and a mapping module. Thanks to the broadcast domain and mapping broadcast domain identifiers, there is no need to modify a forwarding engine chip of the current message forwarding device. The invention meets the requirements for an accessing side isolation in a two-layer network and realizes successful message forwarding.

Description

Method and device for controlling message forwarding

This application claims the priority of the Chinese patent application filed on Dec. 27, 2007, the Chinese Patent Application No. 200710304352. 6. The invention is entitled "A Method and Apparatus for Controlling Message Forwarding", the entire contents of which are incorporated by reference. Combined in this application. Technical field

The present invention relates to the field of communications, and in particular, to a method and device for controlling packet forwarding. Background technique

On a Layer 2 network, the working principle of the Layer 2 packet forwarding device is as follows: Receive packets to be forwarded, according to the received books.

The destination MAC address (Media Access Control) address carried in the packet is used to find the MAC forwarding table of the device. The packet is forwarded through the outbound interface corresponding to the MAC address entry. If the packet forwarding device receives the packet and forwards the packet, if the packet forwarding device does not record the mapping between the destination MAC address and the interface (that is, the destination MAC address has not been learned), The packet is broadcasted on all interfaces except the receiving interface (which may be a physical interface or a logical interface) that receives the packet. The Layer 2 packet forwarding device also learns the forwarding packet. The source MAC address of the packet is added to the MAC forwarding table by the source MAC address of the forwarded packet and the corresponding interface of the receiving interface that receives the forwarded packet. When the packet forwarding device receives the reverse packet whose destination MAC address is the destination address, the interface can directly obtain the outbound interface corresponding to the reverse packet by using the MAC forwarding table. The message is broadcast, which saves network bandwidth.

Most of the Layer 2 devices support the division of the broadcast domain (the corresponding broadcast domain ID) according to the Virtual Local Area Network (Virtual Local Area Network) or VSI (Virtual Switch Instance). By dividing the broadcast domain, forwarding is avoided. If the destination MAC address of the packet is not learned, the broadcast of the packet affects other interfaces that are not in the same broadcast domain. After the division of the broadcast domain is performed, correspondingly, the MAC forwarding table in the packet forwarding device is also divided into different shares according to the broadcast domain identifier ID. For example, it is divided into broadcast domain A and broadcast domain B. After receiving the packet, the forwarding table is searched according to the broadcast domain ID (for example, A) of the receiving interface and the destination MAC address carried in the packet; when the destination MAC address is not yet available, When learned, the device only needs to broadcast the packet to all interfaces except the receiving interface in the broadcast domain A, thus avoiding the impact on the interface of the packet forwarding device that is not in the range of the broadcast domain A.

Figure 1 is a schematic diagram of a forwarding structure of a Layer 2 network device, where the receiving module receives a packet to be forwarded. After being sent to the forwarding engine, the forwarding engine search entry storage module obtains the corresponding entry in the MAC forwarding table. According to the interface corresponding to the destination MAC address in the obtained entry, the forwarding engine sends the packet to the sending module for forwarding. At the same time, the forwarding engine reports the MAC learning information (such as the broadcast domain ID, the MAC address, and the receiving interface) of the packet to the upper learning module, and the upper learning module performs MAC learning according to the MAC learning information, and sends the learned entry. Save to the entry storage module.

Currently, when a Layer 2 network is built, the access-side isolation is required. The two devices can communicate with each other. The devices on the access side cannot forward packets to each other. Figure 2 is a schematic diagram of the networking of the VPLS (Virtual Provate LAN Service) device with the access side isolation enabled. The packet forwarding device is SPE (Superstratum Provider Edge). For example, the public network side device includes: SPE1, PE (Provider Edge, Service Provider Edge Device) 2 and SPE3. The access side devices include: UPE (Underlayer PE, Lower PE) 1. UPE2, CE (Customer Edge, Customer edge equipment 1 and CE2; correspondingly, the public network side interfaces of SPE4 are respectively connected to SPE3, interface 1, SPE1, and PE2; UPE2 interface 5, interface 6 connected to CE1, and interface 7 connected to CE2. Packets can be sent between the public network side interface and the access side interface. Mutual forward, while the access is not allowed between the side interface to forward packets to each other.

The inventor found in the process of implementing the present invention that: since the requirement of access side isolation in the Layer 2 network is relatively new, no standard has been formed, and the Layer 2 network device forwarding engine generally adopts ASIC (Appl ication Specific Intergrated). Circuits, ASICs, which are implemented by non-programmable modified chips, are not designed to meet this requirement, so they cannot automatically support the forwarding requirements of the above-mentioned access side isolation. Summary of the invention

In order to implement control packet forwarding on a Layer 2 network device, and in particular, to implement packet forwarding that meets the requirements of the access side isolation, the embodiment of the present invention provides a method and device for controlling packet forwarding. The technical solution is as follows:

A method for controlling packet forwarding, the method comprising:

Dividing a first broadcast domain and a second broadcast domain; the first broadcast domain includes an interface of a public network side and an access side; and the second broadcast domain includes an interface of the public network side;

Saving the first broadcast domain identifier on the interface on the public network side, and storing the second broadcast domain identifier on the interface on the access side;

Receiving a packet to be forwarded, and obtaining a correspondence between the source medium access control address, the receiving interface, and the broadcast domain identifier, and obtaining the correspondence between the source medium access control address and the broadcast domain identifier of the to-be-forwarded packet, The broadcast domain identifier is mapped, and the source media access control address forwarding entry corresponding to the broadcast domain identifier is obtained. A device for controlling packet forwarding, where the device includes:

a dividing module, configured to divide the first broadcast domain and the second broadcast domain; the first broadcast domain includes an interface of the public network side and the access side; and the second broadcast domain includes an interface of the public network side;

a saving module, configured to save the first broadcast domain identifier on an interface of the public network, and save the second broadcast domain identifier on an interface of the access side;

a receiving module, configured to receive a packet to be forwarded;

a mapping module, configured to learn, by the source media access control address of the to-be-forwarded packet, the source media access control address, the receiving interface, and the broadcast domain, after the receiving module receives the packet to be forwarded Mapping the corresponding relationship, and mapping the broadcast domain identifier in the corresponding relationship to obtain a source media access control address forwarding entry corresponding to the mapped broadcast domain identifier.

The beneficial effects of the technical solutions provided by the embodiments of the present invention are:

By dividing the multiple broadcast domains and mapping the broadcast domain identifiers on the packet forwarding device, the control packet is forwarded. The forwarding engine can be automatically supported without modifying the forwarding engine in the current packet forwarding device. The packet is forwarded under the condition that the access side isolation is satisfied in the Layer 2 network. DRAWINGS

1 is a schematic structural diagram of a packet forwarding device provided by the prior art;

2 is a schematic diagram of networking of devices that enable access side isolation provided by the prior art;

3 is a flowchart of a method for controlling packet forwarding according to Embodiment 1 of the present invention;

4 is a schematic diagram of a device for controlling packet forwarding according to Embodiment 4 of the present invention;

FIG. 5 is another schematic diagram of an apparatus for controlling packet forwarding according to Embodiment 4 of the present invention. detailed description

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

The technical solution provided by the embodiment of the present invention implements control packet forwarding by dividing a plurality of broadcast domains and mapping the broadcast domain identifiers on the packet forwarding device, so as to satisfy the access side isolation in the Layer 2 network. Forward the packet under the condition.

Example 1

An embodiment of the present invention provides a method for controlling packet forwarding. The following is a description of the networking diagram of the VPLS packet forwarding device provided in FIG. 2, where the Layer 2 network is configured, and the access side is enabled as needed. Isolation, that is, not allowed The device between the access side performs the mutual forwarding of the packet, and the method provided by the embodiment of the present invention can support the access side isolation on the basis of not changing the forwarding engine of the packet forwarding device of the existing Layer 2 network. Successful forwarding of packets. FIG. 3 is a flowchart of a method for controlling packet forwarding according to an embodiment of the present invention, where the specific content includes:

101: Divide the Layer 2 network with access side isolation into two broadcast domains: Broadcast domain A and broadcast domain B, where broadcast domain A includes all public network side interfaces 1, 2, and 3 of the packet forwarding device. Side interface 4, 5, 6, 7; Broadcast domain B only contains public network side interfaces 1, 2, 3.

102: Save the identifier A of the broadcast domain A in the information table of the interfaces of all the public network side interfaces 1, 2, and 3; and save the broadcast domain B in the interface information table of all the access side interfaces 4, 5, 6, and 7. Logo B.

103: Receive a packet to be forwarded, search for a MAC forwarding table indexed by the identifier of the broadcast domain corresponding to the interface, forward the packet, and learn the source MAC address of the packet to be forwarded. The broadcast domain identifier in the corresponding relationship is mapped correspondingly, and the MAC forwarding entry corresponding to the mapped broadcast domain identifier is obtained.

The following is a detailed description of the packet to be forwarded, which is specifically described by the packet forwarding device receiving the packet from the public network side and the packet from the access side. The specific content is as follows:

1) When the packet forwarding device receives a packet from the public network side that needs to be forwarded to the access side, it searches for a MAC forwarding table indexed by the identifier of the broadcast domain A, and performs source MAC learning, and learns after learning. The broadcast domain identifier A in the correspondence is mapped to the broadcast domain identifier B.

In this embodiment, the packet that needs to be forwarded to the access side is received by the interface on the public network side as an example. The content is as follows: a. When the destination MAC address of the forwarded packet is the CE1 of the access device, When the packet forwarding device has learned that the interface corresponding to the CE1 is 6, the identifier A of the broadcast domain A saved by the interface 1 is used as an index, and the MAC forwarding table corresponding to the broadcast domain A is searched to obtain the interface 6 corresponding to the destination MAC address. The forwarding packet is sent to the interface 6 corresponding to the access side in a unicast manner.

When the correspondence between the destination MAC address and the interface of the forwarding packet is not recorded on the packet forwarding device (that is, the destination MAC address has not been learned yet), the packet forwarding device is configured according to the interface of the interface 1. The interface information of the broadcast domain A stored in the information table is broadcast to all interfaces 1, 2, 3, 4, 5, 6, and 7 corresponding to the broadcast domain A, and then compared by the receiving interface and the sending interface of the packet. Packets sent to the interface 1 are discarded. In this case, packets are broadcast to other interfaces except the receiving interface on all interfaces corresponding to the broadcast domain A.

The source MAC address learning is performed on the forwarded packet, and the broadcast domain A in the corresponding domain of the broadcast domain A, the MAC address, and the receiving interface is mapped to the broadcast domain B, and the MAC forwarding entry of the broadcast domain B is obtained.

For example, the source MAC address of the forwarding packet is obtained, and the correspondence between the MAC address, the broadcast domain A, and the receiving interface is obtained, and the broadcast domain identifier in the corresponding relationship is mapped, that is, the identifier A is mapped to the identifier B, and the broadcast domain B is obtained. MAC forwarding entry. See Table 1, for the mapping example generated before mapping, see Table 2, for MAC forwarding after mapping. An example of a table entry. The mapping algorithm of the broadcast domain identifier may be implemented by a corresponding mapping algorithm that can be supported by the software. The embodiment of the present invention does not limit the mapping algorithm used.

Table 1

After the learning of the source MAC is performed, the broadcast domain A in the correspondence between the learned broadcast domain A, the MAC address, and the receiving interface is mapped to the broadcast domain B, and the MAC forwarding entry of the broadcast domain B is obtained. At this time, when the packet forwarding device receives the forwarding packet from the access side (and the device corresponding to the destination MAC address of the packet is on the public network side), the broadcast domain identifier saved on the access side interface can be used. B is the index to find the MAC forwarding table, and the packet is sent to the public network side interface in unicast mode.

2) When the packet forwarding device receives the packet to be forwarded from the access side, it searches for the MAC forwarding table indexed by the identifier of the broadcast domain B, performs source MAC learning, and maps the broadcast domain identifier B after learning. Identify A for the broadcast domain.

In this embodiment, the packet that needs to be forwarded is received by the access side interface 4 as an example. The content is as follows: a. When the destination MAC address of the forwarded packet is the device PE2 on the public network side, and the packet forwarding device is used. After learning that the interface corresponding to the PE2 is 3, the identifier B of the broadcast domain B saved by the interface 4 is used as an index, and the MAC forwarding table corresponding to the broadcast domain B is searched, and the interface 3 corresponding to the destination MAC address is obtained. The packet is sent to the corresponding interface 3 on the public network side in unicast mode.

When the correspondence between the destination MAC address and the interface of the forwarding packet is not recorded on the packet forwarding device (that is, the destination MAC address has not been learned yet), the packet forwarding device according to the interface information table of the interface 4 The interface information of the broadcast domain B saved in the broadcast is broadcast to all interfaces 1, 2, and 3 corresponding to the broadcast domain B;

The source MAC address learning is performed on the forwarded packet, and the broadcast domain B in the corresponding domain of the broadcast domain B, the MAC address, and the receiving interface is mapped to the broadcast domain A, and the MAC forwarding entry of the broadcast domain A is obtained.

For example, when the source MAC address learning is performed, the correspondence between the MAC address, the broadcast domain A, and the receiving interface is obtained, and the broadcast domain identifier in the corresponding relationship is mapped, that is, the identifier B is mapped to the identifier A, and the MAC of the broadcast domain A is obtained. Publish the item. See Table 3 for an example of the generated correspondence before mapping. See Table 4 for an example of the MAC forwarding entry obtained after mapping. table 3

The MAC address forwarding entry of the broadcast domain A is obtained by mapping the broadcast domain B in the correspondence between the learned broadcast domain B, the MAC address, and the receiving interface to the broadcast domain A. In this case, when the packet forwarding device receives the forwarding packet from the public network side, and the device corresponding to the destination MAC address of the packet is on the access side, the broadcast domain identifier A can be saved on the public network side interface. The MAC forwarding table is searched for the index, and the packet is sent to the access side interface in a unicast manner.

In summary, the above method can meet the requirements for performing access side isolation when forwarding packets in a Layer 2 network:

When the forwarding packet is received through the interface on the public network side, the broadcast domain A is used for indexing and forwarding, because the destination MAC address is unknown. The packet can be broadcasted to all interfaces in the broadcast domain A (including the access side interface); when the device corresponding to the destination MAC address is on the access side, the MAC of the broadcast domain B will be broadcasted when MAC address learning is performed. The address entry is mapped to the MAC address entry of broadcast domain A. The packets received by the public network can be sent to the access side interface in unicast mode.

When the forwarding packet is received through the access side interface, the broadcast domain B is used to perform table lookup forwarding by using the broadcast domain B. When the destination MAC address is unknown, The packet can be broadcast to all the interfaces in the broadcast domain B (including the public network side interface, excluding the access side interface). When the device corresponding to the destination MAC address is on the public network side, The MAC address entry of the broadcast domain A is mapped to the MAC address entry of the broadcast domain B. The packet received by the access side can be sent to the public network side interface in unicast mode.

It can be seen that the packets on the public network side and the access side can communicate with each other. The access side interface cannot learn the MAC address of the other party when the broadcast domain B is indexed. In the case of the address, the unicast communication is performed; and when the broadcast communication is performed according to the unknown MAC address, the interface on the access side is not in the corresponding broadcast domain B, so the broadcast mode cannot be communicated, thereby achieving the connection. The purpose of isolation into the side.

The embodiment of the present invention can implement the control packet forwarding by dividing the multiple broadcast domains and mapping the broadcast domain identifiers on the packet forwarding device, without modifying the forwarding engine in the current packet forwarding device. Automatically supports and implements forwarding of packets under the condition that the access side isolation is satisfied in the Layer 2 network. Example 2

The method for controlling packet forwarding provided by the embodiment of the present invention may be further optimized. In this embodiment, the MAC address entry generated according to the correspondence relationship is set according to the corresponding relationship generated before the mapping of the MAC entry in the first embodiment. The interface in the MAC entry is a blackhole interface, which effectively avoids the problem of continuously reporting the MAC learning message because the source MAC address cannot be found in the MAC forwarding table.

This embodiment further describes the case where the packet is received from the interface on the public network side and the packet is received on the access side interface. The details are as follows:

1) When the packet forwarding device receives the forwarding packet whose source MAC address is MAC1 through the public network side interface 1, when searching for the MAC forwarding table of the broadcast domain A, the MAC forwarding table of the broadcast domain A does not exist. The entry corresponding to the MAC1 and the interface 1 is recorded, and the MAC learning message of the MAC1 is continuously reported because the corresponding entry is not found in the MAC forwarding table of the broadcast domain A. This embodiment solves the above problem by generating a MAC entry corresponding to the learned MAC1 address in the forwarding table of the broadcast domain A. The solution is as follows:

In the forwarding table of the broadcast domain A, a MAC entry is generated according to the correspondence between the learned MAC1, the broadcast domain A, and the interface 1, and the interface corresponding to the MAC entry is set as a blackhole interface. The status of the interface is blackhole. The packets that match the interface are discarded. For the mappings provided in Table 1, the MAC address entries of the broadcast domain A are generated. As shown in Table 5, the interfaces in the entries are set as blackhole interfaces. At this time, when the interface 1 continues to receive the forwarding packet whose source MAC address is MAC1, the MAC1 entry can be found in the broadcast domain A according to the source MAC address, so that the MAC learning message is continuously reported. problem.

table 5

The above example is for forwarding in a VPLS (VSI) service. According to the standard, in the VPLS service, the public network side-to-side Us should be isolated from each other. Therefore, setting the MAC1 of the broadcast domain A to the black hole is a black hole, which can achieve this goal in advance. If the interface on the public network side receives a packet to be forwarded with the destination MAC address being MAC1, the interface on the public network side stores the information of the broadcast domain A. Then, the MAC forwarding table is searched according to the broadcast domain A and MAC1, and the corresponding interface is found. It is a black hole interface, so the message will be discarded directly.

In the Layer 2 VLAN forwarding service, the interfaces on the public network side do not need to be isolated from each other. In this case, the MAC address entry in the broadcast domain A does not need to be configured as a blackhole interface. The situation shown can be.

2) When the packet forwarding device receives the forwarding packet whose source MAC address is MAC4 through the access side interface 4, when searching for the MAC forwarding table of the broadcast domain B, the MAC forwarding table of the broadcast domain B does not exist. The entry corresponding to the MAC4 and the interface 4 is recorded, and the corresponding entry is not found in the MAC forwarding table of the broadcast domain B, and the MAC4 is continuously reported. MAC learning message. This embodiment solves the above problem by generating a MAC entry corresponding to the MAC4 address in the MAC forwarding table of the broadcast domain B. The solution is as follows:

In the forwarding table of the broadcast domain B, according to the correspondence between the learned MAC4, the broadcast domain B, and the interface 4, a MAC entry is generated according to the corresponding relationship, and the interface corresponding to the entry is set as a black hole interface, so that the The interface is in the black hole mode. That is, the interface of the entry is directly discarded. See Table 6 for the mapping between the MAC address entries of the broadcast domain B and the interface of the entry. Black hole interface. At this time, when the interface 4 continues to receive the forwarding packet whose source MAC address is MAC4, the MAC4 entry can be found in the broadcast domain B according to the source MAC address, so that the problem of continuously reporting the MAC learning message is effectively avoided. .

Table 6

In this embodiment, the purpose of setting the outbound interface in the broadcast domain B as a blackhole interface is to find the MAC address of the other party in the broadcast domain B as an index between the access side interfaces, but the two parties cannot communicate. That is to say, in this case, the packet forwarding device can still achieve the purpose of isolation on the access side when forwarding the packet.

The upper layer learning module of the existing Layer 2 network device determines whether there are two corresponding broadcasts according to the information of the broadcast domain mapping module before saving the newly learned MAC entry. The domain, if any, sends a newly learned MAC entry for each of the two broadcast domains, except that the outbound interface of one of the MAC entries is set to the learned interface, and the other outgoing interface is required. Determine whether it is a VPLS service or a Layer 2 VLAN service:

a. If it is a VPLS service, set it as a black hole interface.

If the Layer 2 VLAN service is used, the outbound interface of the corresponding MAC address entry on the public network is set to the learned interface, and the outbound interface of the MAC entry corresponding to the access side is set as the blackhole interface.

The embodiment of the present invention can effectively prevent the MAC address learning message from being continuously reported due to the fact that the source MAC address cannot be found in the MAC forwarding table, while ensuring that the packet forwarding device forwards the packet to the access side. problem. Example 3

A person skilled in the art knows that when performing Layer 2 network maintenance, a static MAC is manually configured to avoid broadcast forwarding during MAC learning, or to forward a packet to an interface whose destination MAC address is not in its range. Therefore, in this embodiment, the entry corresponding to the static MAC address configured by the network management system or manually configured (the broadcast domain identifier, the MAC address, and the corresponding interface) may be saved in the MAC forwarding table of the broadcast domain A and/or 8. You do not need to force the outbound interface of one of the MAC entries to be a blackhole interface. Usually configured static MAC has a special purpose When a packet hits the entry, the packet is forwarded to the interface corresponding to the entry, thereby achieving the special purpose of packet forwarding. By configuring the MAC address statically, you can still communicate with each other between the devices connected to the access side.

In the embodiment of the present invention, the MAC address is statically configured, so that when the access side isolation is enabled, the access side device can forward packets between each other when special purpose communication is required. Example 4

Referring to FIG. 4, an embodiment of the present invention provides a device for controlling packet forwarding, where the device includes:

The dividing module 201 is configured to divide the first broadcast domain and the second broadcast domain; the first broadcast domain includes an interface of the public network side and the access side; and the second broadcast domain includes an interface of the public network side;

The saving module 202 is configured to save the first broadcast domain identifier on the interface on the public network side, and save the second broadcast domain identifier on the interface on the access side;

The receiving module 203 is configured to receive a packet to be forwarded.

The mapping module 204 is configured to: after the receiving module 203 receives the packet to be forwarded, learn, by using the source medium access control address of the packet to be forwarded, the source medium access control address, the receiving interface, and the broadcast domain identifier, and The broadcast domain identifier in the corresponding relationship is mapped, and the source media access control address forwarding entry corresponding to the broadcast domain identifier is obtained.

Referring to FIG. 5, when the interface that receives the packet to be forwarded is a public network side interface, the mapping module 204 may further include:

The first mapping unit 2041 is configured to: when the receiving module 203 receives the packet to be forwarded from the public network side interface, learn, by the source medium access control address of the forwarded packet, the source medium access control address, the receiving interface, and the first And mapping the first broadcast domain identifier to the second broadcast domain identifier, and generating the source media access control address forwarding entry corresponding to the second broadcast domain identifier.

When the interface that receives the packet to be forwarded is the access side interface, the mapping module 204 may further include: the second mapping unit 2042 is configured to receive, when the receiving module 203, the packet to be forwarded is from the access side. The source medium access control address of the access side interface receiving the forwarded packet learns the correspondence between the source medium access control address, the receiving interface, and the second broadcast domain identifier, and the source medium access control address, the receiving interface, and the second The second broadcast domain identifier in the correspondence between the broadcast domain identifiers is mapped to the first broadcast domain identifier, and the source media access control address forwarding entry corresponding to the first broadcast domain identifier is generated.

The device further includes a forwarding module 205, configured to search for a media access control forwarding table corresponding to the broadcast domain identifier to forward the packet according to the broadcast domain identifier corresponding to the interface that receives the packet to be forwarded. In order to avoid the situation of continuously reporting MAC learning messages, the device may further include:

The setting module 206 is configured to: when the mapping module 204 learns the correspondence between the source media access control address, the receiving interface, and the broadcast domain identifier, generate a media access control forwarding entry corresponding to the broadcast domain identifier, and set the media corresponding to the broadcast domain identifier. The interface in the access control forwarding entry is configured as a blackhole interface (in the case of a VPLS service or a Layer 2 VLAN forwarding service learning access side MAC address). Or the actual learning interface (the case where the Layer 2 VLAN forwarding service learns the MAC address of the public network side).

In order to achieve the special purpose of the packet forwarding, for example, when the access side isolation is enabled, for a special purpose, when two devices between the access side and the access side need to communicate with each other, the device further includes:

The configuration module 207 is configured to obtain, by using a static configuration, a media access control forwarding entry corresponding to the broadcast domain identifier.

The device for controlling packet forwarding provided by the embodiment of the present invention implements control packet forwarding by splitting the mapping between the broadcast domain and the broadcast domain identifier. In particular, the current packet forwarding device meets the requirements of the access side isolation, and the forwarding engine in the forwarding process is not modified, so that the packet is successfully forwarded. The technical solution provided by the embodiment of the present invention implements the control packet forwarding by dividing the multiple broadcast domains and mapping the broadcast domain identifiers on the packet forwarding device, without modifying the forwarding engine in the current packet forwarding device. On the basis of the above, it can automatically support and meet the requirements of forwarding packets under the condition that the access side isolation is satisfied in the Layer 2 network.

Some of the steps in the embodiment of the present invention may be implemented by software, and the corresponding software program may be stored in a readable storage medium such as an optical disk or a hard disk.

The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc., which are within the spirit and scope of the present invention, should be included in the protection of the present invention. Within the scope.

Claims

Claim

A method for controlling packet forwarding, the method comprising:

Receiving a packet to be forwarded, and obtaining a correspondence between the source medium access control address, the receiving interface, and the broadcast domain identifier, and obtaining the correspondence between the source medium access control address and the broadcast domain identifier of the to-be-forwarded packet, The broadcast domain identifier is mapped, and the source media access control address forwarding entry corresponding to the broadcast domain identifier is obtained.

The method for controlling packet forwarding according to claim 1, wherein the receiving the packet to be forwarded, accessing the control address of the source medium of the packet to be forwarded, and learning to obtain the source medium The mapping between the access control address, the receiving interface, and the broadcast domain identifier is performed, and the broadcast domain identifier in the corresponding relationship is mapped, and the source media access control address forwarding entry corresponding to the broadcast domain identifier is obtained, which is specifically:

The interface on the public network side receives the packet to be forwarded, and learns the source medium access control address of the packet to be forwarded, and learns to obtain the source medium access control address, the receiving interface, and the first broadcast domain identifier. Corresponding relationship, the first broadcast domain identifier in the corresponding relationship is mapped to the second broadcast domain identifier, and the source media access control address forwarding entry corresponding to the second broadcast domain identifier is generated.

The interface on the access side receives the packet to be forwarded, and learns the source medium access control address of the packet to be forwarded, and learns to obtain the source medium access control address, the receiving interface, and the second broadcast domain identifier. Corresponding relationship, the second broadcast domain identifier in the corresponding relationship is mapped to the first broadcast domain identifier, and the source media access control address forwarding entry corresponding to the first broadcast domain identifier is generated.

The method for controlling packet forwarding according to claim 1, wherein the method further comprises: when receiving the packet to be forwarded, searching according to the broadcast domain identifier corresponding to the interface receiving the packet The broadcast domain identifier corresponds to The media access control forwarding table forwards the message.

The method for controlling packet forwarding according to claim 1, wherein the source medium access control address learning of the packet obtains the source medium access control address, the receiving interface, and the broadcast domain identifier. After the correspondence, it also includes:

And generating, according to the corresponding relationship, a media access control forwarding entry corresponding to the broadcast domain identifier, and setting an interface in the media access control forwarding entry corresponding to the broadcast domain identifier as a black hole interface.

The method for controlling packet forwarding according to claim 1, wherein the method further comprises: obtaining, by the static configuration, a media access control forwarding entry corresponding to the broadcast domain identifier.

A device for controlling packet forwarding, wherein the device includes:

a dividing module (201), configured to divide the first broadcast domain and the second broadcast domain; the first broadcast domain includes an interface of the public network side and the access side; and the second broadcast domain includes the public network side Interface;

a saving module (202), configured to save the first broadcast domain identifier on an interface on the public network side, and save the second broadcast domain identifier on an interface on the access side;

a receiving module (203), configured to receive a packet to be forwarded;

a mapping module (204), configured to: when the receiving module (203) receives the packet to be forwarded, learn the source medium access control address of the to-be-forwarded packet to obtain the source medium access control address, The mapping between the receiving interface and the broadcast domain identifier is performed, and the broadcast domain identifier in the corresponding relationship is mapped, and the source media access control address forwarding entry corresponding to the mapped broadcast domain identifier is obtained.

8. The device for controlling packet forwarding according to claim 7, wherein the mapping module (204) specifically includes:

The first mapping unit (2041) is configured to: when the receiving module (203) receives the packet to be forwarded from the public network side interface, learn the source medium access control address of the to-be-forwarded packet Mapping the source medium access control address, the receiving interface, and the first broadcast domain identifier, mapping the first broadcast domain identifier in the corresponding relationship to the second broadcast domain identifier, and generating the second broadcast domain identifier Source media access control address forwarding entry.

The apparatus for controlling packet forwarding according to claim 7, wherein the mapping module (204) specifically includes: a second mapping unit (2042), configured to receive, when the receiving module (203) receives a packet to be forwarded from the access side interface, to receive, by the access side interface, a packet to be forwarded The source medium access control address learning obtains the correspondence between the source medium access control address, the receiving interface, and the second broadcast domain identifier, and the correspondence between the source medium access control address, the receiving interface, and the second broadcast domain identifier The second broadcast domain identifier in the relationship is mapped to the first broadcast domain identifier, and the source media access control address forwarding entry corresponding to the first broadcast domain identifier is generated.

The device for controlling packet forwarding according to claim 7, wherein the device further includes a forwarding module (205) configured to search according to a broadcast domain identifier corresponding to an interface that receives the packet to be forwarded. The medium access control forwarding table corresponding to the broadcast domain identifier performs packet forwarding.

The device for controlling packet forwarding according to claim 7, wherein the device further comprises: a setting module (206), configured to learn, by the mapping module (204), the source medium access control And generating, by the address, the media access control forwarding entry corresponding to the broadcast domain identifier, and the interface in the media access control forwarding entry corresponding to the broadcast domain identifier, as needed, when the mapping between the address, the receiving interface, and the broadcast domain identifier is performed. Set to black hole interface.

The device for controlling packet forwarding according to claim 7, wherein the device further comprises: a configuration module (207), configured to obtain a media access control forwarding table corresponding to the broadcast domain identifier by static configuration item.