WO2016165491A1

WO2016165491A1 - Bridging service and bridging network element inspection method and apparatus

Info

Publication number: WO2016165491A1
Application number: PCT/CN2016/074452
Authority: WO
Inventors: 郑颖; 张磊
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-08-26
Filing date: 2016-02-24
Publication date: 2016-10-20
Also published as: CN106487544A

Abstract

A bridging service and bridging network element inspection method and apparatus. The method comprises the following steps: selecting a device to be checked in a network according to an inspection solution of a bridging service and a bridging network element; acquiring an L2VPN service passing through the device; identifying the bridging service and the bridging network element related to the device in the network by analyzing a configuration of an output service port of a trunking network element of the L2VPN service; and inspecting the bridging service and the bridging network element according to the inspection solution of the bridging service and the bridging network element. The technical solution of the present invention greatly reduces the difficulty of the bridging service inspection, improves the inspection accuracy and the inspection efficiency, and greatly reduces the investment in manpower cost.

Description

Patrol service and bridge network element inspection method and device

Technical field

The present invention relates to the field of patrol technology for bridging services and bridging network elements, and in particular to a bridging service and a patrol inspection method and apparatus for bridging network elements.

Background technique

With the development of data communication and multimedia services, the data communication network has spread all over the world. It is necessary to use the relevant data communication network to provide users with low-cost network communication, and to be compatible and adapt to the needs of new data communication services. Mobile gateway bridging service configuration The solution is widely used in data communication networks.

Currently, the Ethernet bridging service configuration schemes commonly used in the network include a VSI (Virtual Switch Interface) scheme and a Multi-to-One VLAN (Virtual Local Area Network) convergence scheme. The base station Layer 2 Ethernet services are aggregated to the same bridged network element on the core layer. Therefore, several thousand base stations may be connected under one bridge network element, and there may be several thousand base station services on one bridge network element, and a large number of bridge relationship pairs may be configured on one bridge network element. Due to regional distribution requirements, multiple bridged network elements coexist in the entire network. In addition, the bridging service itself has complex configuration and many related configuration items, and based on the high reliability requirements of the service, the bridging network elements are mostly paired with each other, and there is strong data association between the active and standby bridging network elements. . In addition, in different carrier application scenarios, the configuration requirements of the bridging service are also very different.

Therefore, in the network operation and maintenance work, the inspection and bridging service is an important task that needs to be performed frequently. However, the manual inspection has a very large workload, is very difficult, and has very low efficiency, and it is difficult to ensure the accuracy and completeness of the inspection results.

There are currently some tools available, such as network management systems, or inspection tools for some direct-connected devices, but these tools have some limitations in their applications. For example, the network management system mainly focuses on the real-time presentation of the current configuration and status of the device. However, the bridging service is a logical concept. It is necessary to combine multiple association configurations to form a bridging service, and the data association between the active and standby bridging network elements is high. Checking the standardization of bridging services and bridging points requires real-time data based on specific rules. According to the analysis, the judgment can be made, so the network management system cannot meet the requirements. For example, the check tool of the directly connected device can directly send a command to the device to query the device configuration and status. However, the tool is mainly a point-to-point check device basic configuration. If you want to find the bridge service and bridge the network element, you must traverse the entire network device. , low efficiency. In addition, the tool is suitable for presenting the current configuration and status of relatively independent functions on the device, such as checking device temperature and memory usage, but not checking for complex business logic, many configuration items, and high service coupling between devices. Complex business configurations, such as bridging services. Moreover, the data obtained by the tool from the device is not intuitive, and the professional skill of the user is very high, so the inspection tool of the directly connected device cannot meet the requirements.

Summary of the invention

The object of the present invention is to provide a method and a device for checking the bridging service and the bridging network element, so as to solve the problem that the bridging service inspection in the related art is difficult, and the accuracy and the efficiency are low.

In order to solve the above technical problems, the following technical solutions are adopted:

A method for inspecting a bridging service and a bridging network element includes the following steps:

Selecting devices to be inspected in the network according to the bridging service and the inspection scheme of the bridged network element;

Obtaining an L2VPN service passing through the device;

The bridge service and the bridge network element related to the device in the network are identified by analyzing the configuration of the output service port of the L2VPN service floor network element;

Performing inspections on the bridging service and the bridging network element according to the bridging service and the inspection scheme of the bridged network element;

The L2VPN service refers to a Layer 2 virtual private network service.

Optionally, the method further includes:

Obtaining pseudowire protection group data associated with the device;

The primary bridged network element and the standby bridged network element are identified from the bridged network element by analyzing the pseudowire protection group data.

Optionally, the step of identifying the bridging service related to the device in the network by analyzing the configuration of the output service port of the L2VPN service floor network element includes:

By analyzing the configuration of the output service port of the L2VPN service floor network element, filtering out the L2VPN service whose output service port of the L2VPN service floor network element is a Layer 2 virtual interface or a Layer 2 virtual sub-interface;

Determining whether the filtered L2VPN service is a bridged L2VPN service;

When it is determined that the filtered L2VPN service is a bridged L2VPN service, the L2VPN service is determined as a bridging service.

Optionally, the step of determining whether the filtered L2VPN service is a bridged L2VPN service includes:

If the Layer 2 virtual interface of the output service of the L2VPN service network element has a one-to-one binding relationship with the Layer 3 virtual interface, determine that the filtered L2VPN service is a bridged L2VPN service; or

If the Layer 2 virtual sub-interface of the output service of the L2VPN service network element has a one-to-one binding relationship with the Layer 3 virtual sub-interface, it is determined that the filtered L2VPN service is a bridged L2VPN service.

Optionally, the step of identifying the bridged network element related to the device in the network by analyzing the configuration of the output service port of the L2VPN service floor network element includes:

The node where the Layer 2 virtual interface of the output service of the L2VPN service landing network element is located is a bridge network element; or

The node where the Layer 2 virtual sub-interface of the output service of the L2VPN service landing network element is located is used as the bridge network element.

Optionally, the step of identifying the primary bridged network element and the standby bridged network element from the bridged network element by analyzing the pseudowire protection group data includes:

By analyzing the pseudowire protection group data, filtering out the single-issue double-received pseudo-line dual-homing protection group;

According to the single-issue dual-received pseudo-line dual-homing protection group, filtering out the bridging service service layer pseudo-line is the first bridging service of the single-issue dual-received pseudo-line dual-homing protection group;

The two bridged network elements on the first bridging service are used as the primary bridged network element and the backup bridged network element.

Optionally, the bridging service and the bridging according to the bridging service and the inspection scheme of the bridged network element The steps for the network element to perform the inspection include:

Obtaining configuration parameters and status data of the bridged network element, the primary bridged network element, and the standby bridged network element corresponding to the bridging service according to the bridging service and the inspection scheme of the bridged network element;

The bridge service and the bridge network element are patrolled according to the configuration parameter and the status data.

Optionally, the ping inspection scheme of the bridging service and the bridging network element includes multiple inspection rules. In the following, different inspection rules are invoked for the bridging service of the device to be inspected and the patrol scheme of the bridging network element.

A patrol device for bridging services and bridging network elements, including a selection module, an L2VPN service module, an identification module, and a patrol module, wherein

The selection module is configured to: select a device to be inspected in the network according to the bridging service and the inspection scheme of the bridged network element;

The acquiring the L2VPN service module is configured to: obtain an L2VPN service that passes through the device;

The identifying module is configured to: identify a bridging service and a bridging network element related to the device in the network by analyzing a configuration of an output service port of the L2VPN service floor network element;

The patrol module is configured to perform patrol inspection on the bridging service and the bridging network element according to the bridging service and the patrol inspection scheme of the bridging network element.

Optionally, the device further includes: acquiring a pseudowire protection group data unit,

The acquiring the pseudowire protection group data unit is configured to: acquire pseudowire protection group data associated with the device; and identify the primary bridge network element from the bridge network element by analyzing the pseudowire protection group data And alternate bridged network elements.

Optionally, the identifying module is configured to identify the bridging service related to the device in the network by analyzing the configuration of the output service port of the L2VPN service landing network element as follows:

Determining whether the filtered L2VPN service is a bridged L2VPN service;

Optionally, the identifying module is configured to determine whether the filtered L2VPN service is a bridged L2VPN service according to the following manner:

Optionally, the identifying module is configured to: by analyzing the configuration of the output service port of the L2VPN service floor network element, to identify the bridged network element related to the device in the network, including:

Optionally, the acquiring the pseudowire protection group data unit is configured to identify the primary bridged network element and the backup bridged network element from the bridged network element by analyzing the pseudowire protection group data as follows:

Optionally, the patrol module is configured to perform patrol inspection on the bridging service and the bridging network element according to the bridging service and the patrol inspection scheme of the bridging network element as follows:

Compared with the related art, the beneficial effects of the present invention are:

In the technical solution of the present invention, the user can customize the inspection scheme and reuse the inspection scheme. The system can identify the L2VPN bridging service and the bridging network element in the entire network, and complete the bridging service and the bridging network element configuration and status check in the entire network. The manual input cost of the bridging service and the bridging network element inspection is greatly reduced, the difficulty of the bridging service and the bridging network element inspection is reduced, the accuracy of the inspection and the efficiency of the inspection are improved, and the labor cost input is greatly reduced.

BRIEF abstract

FIG. 1 is a flowchart of a method for inspecting a bridging service and a bridging network element according to an embodiment of the present invention;

2 is a structural diagram of a bridging service and a patrol device for a bridged network element according to an embodiment of the present invention;

3 is a schematic diagram of a bridging service and a patrol system for a bridged network element according to an embodiment of the present invention;

4 is a flowchart of a bridging service and a method for inspecting a bridged network element according to a first embodiment of the present invention;

FIG. 5 is a flowchart of a bridging service and a method for inspecting a bridged network element according to a second embodiment of the present invention.

Preferred embodiment of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The preferred embodiments of the present invention are described in detail below with reference to the accompanying drawings.

1 is a flowchart of a method for inspecting a bridging service and a bridging network element according to an embodiment of the present invention. As shown in FIG. 1, the method includes the following steps:

Step S101: Select a device to be inspected in the network according to the bridging service and the inspection scheme of the bridged network element.

Step S102: Acquire an L2VPN service that passes through the device.

Step S103: Identifying the bridging service and the bridging network element related to the device in the network by analyzing the configuration of the output service port of the L2VPN service landing network element;

Step S104: Perform patrol inspection on the bridging service and the bridging network element according to the bridging service and the patrol inspection scheme of the bridged network element.

The L2VPN service refers to a Layer 2 virtual private network service.

The embodiment of the present invention further includes: acquiring pseudowire protection group data associated with the device; identifying the primary bridge network element and the backup bridge network element from the bridge network element by analyzing the pseudowire protection group data .

The analyzing the configuration of the output service port of the L2VPN service landing network element, and identifying the bridging service related to the device in the network includes: analyzing the configuration of the output service port of the L2VPN service landing network element And filtering out the L2VPN service of the L2VPN service landing network element as the Layer 2 virtual interface or the Layer 2 virtual sub-interface; determining whether the filtered L2VPN service is a bridged L2VPN service; and determining the filtered L2VPN service When the L2VPN service is bridged, the L2VPN service is determined to be a bridge service. The determining whether the filtered L2VPN service is a bridged L2VPN service includes: if the Layer 2 virtual interface of the output service of the L2VPN service landing network element has a one-to-one binding relationship with the Layer 3 virtual interface, The L2VPN service is a bridged L2VPN service; or if the Layer 2 virtual sub-interface of the output service of the L2VPN service landing network element has a one-to-one binding relationship with the Layer 3 virtual sub-interface, it is determined that the filtered L2VPN service is bridged. L2VPN service.

The analyzing the configuration of the output service port of the L2VPN service floor network element, and identifying the bridge network element related to the device in the network includes: layer 2 of the output service of the L2VPN service landing network element The node where the virtual interface is located serves as the bridged network element; or the node where the Layer 2 virtual sub-interface of the output service of the L2VPN service landing network element is located as the bridged network element. The analyzing the pseudowire protection group data, identifying the primary bridge network element and the backup bridge network element from the bridge network element, by filtering the data of the pseudo line protection group, filtering out single-issue and dual-receiving Pseudowire double return a protection group; according to the single-issue double-received pseudo-line dual-homing protection group, filtering out the bridging service service layer pseudowire is a first bridging service of a single-issue dual-received pseudo-line dual-homing protection group; The two bridged network elements on the service serve as the primary bridged network element and the standby bridged network element.

The patrolling service and the bridging network element are inspected according to the bridging service and the bridging network element inspection scheme, including: bridging the network element and the bridging network corresponding to the bridging service according to the bridging service and the inspection scheme of the bridging network element The configuration parameters and status data of the network element and the alternate bridged network element; and the patrol service and the bridged network element are patrolled according to the configuration parameter and the status data. Specifically, the ping inspection scheme of the bridging service and the bridging network element includes multiple inspection rules; wherein different inspection rules are invoked for the bridging service of different devices to be inspected and the patrol inspection scheme of the bridging network element.

2 is a structural diagram of a bridging service and a patrol device for a bridged network element according to an embodiment of the present invention. As shown in FIG. 2, the method includes: a selection module 201, an L2VPN service module 202, an identification module 203, and a patrol module. 204.

The selecting module 201 is configured to: select a device to be inspected in the network according to the bridging service and the inspection scheme of the bridged network element;

The acquiring the L2VPN service module 202 is configured to: obtain an L2VPN service that passes through the device;

The identifying module 203 is configured to: identify the bridging service and the bridging network element related to the device in the network by analyzing the configuration of the output service port of the L2VPN service floor network element;

The patrol module 204 is configured to perform patrol inspection on the bridging service and the bridging network element according to the bridging service and the patrol inspection scheme of the bridging network element.

The embodiment of the present invention further includes: acquiring a pseudowire protection group data unit, configured to: acquire pseudowire protection group data associated with the device; wherein, by analyzing the pseudowire protection group data, from the bridge network element The primary bridged network element and the standby bridged network element are identified.

The output service port of the L2VPN service floor network element is filtered as a Layer 2 virtual interface or a Layer 2 virtual sub-interface by analyzing the configuration of the output service port of the L2VPN service floor network element. L2VPN service;

Determining whether the filtered L2VPN service is a bridged L2VPN service;

Optionally, the ping inspection scheme of the bridging service and the bridging network element includes multiple inspection rules. The patrol module invokes different inspection rules for the bridging service of the device to be inspected and the inspection scheme of the bridging network element. .

FIG. 3 is a schematic diagram of a bridging service and a bridging network element inspection system according to an embodiment of the present invention. As shown in FIG. 3, the method includes: a customized inspection scheme module 301, an acquisition data module 302, a recognition bridging service, and a bridge network. The meta module 303, the patrol bridging service, and the bridging network element module 304.

The customized inspection plan module 301 selects an inspection rule according to the requirements of the on-site inspection, and customizes the inspection service of the bridge service. In one solution, multiple inspection rules are supported, and multiple sets of inspection plans are supported, and the inspection plan can be saved. For templates, plan templates can be reused. The inspection plan supports checking multiple device types and checking multi-terminal devices.

The collection data module 302 collects the base station service in the network according to the customized inspection scheme (mainly refers to the L2VPN service, hereinafter referred to as the L2VPN service, and collects the pseudowire protection group associated with the selected device.

The identifying the bridging service and the bridging network element module 303, the system identifies the L2VPN bridging service and the bridging network element from the collected L2VPN service. The system filters out the single-issue double-received pseudo-line dual-homing protection group from the collected pseudo-line protection group. The bridged network element that is mutually active and standby is identified by the correspondence between the L2VPN bridging service and the single-issue and dual-received pseudowire protection group. There are multiple L2VPN bridging services on a bridged network element, and there are multiple pairs of bridged pairs. In the whole network, there are multiple bridging NEs, and most of them are active and standby in pairs. The system will identify all L2VPN bridging services, bridged NEs, and active and standby bridging NEs in the network.

The patrol bridging service and the bridging network element module 304 invoke the inspection rule processing flow in the patrol inspection scheme to check the bridging service and the bridging network element. According to the requirements of the inspection rule, the data source can be obtained from multiple channels, for example, the configuration and status data of the bridged network element, the primary bridged network element, and the standby bridged network element corresponding to the L2VPN bridging service are obtained from the network management or the device. Check the bridge according to the inspection rules Check whether the service configuration data meets the configuration specifications, check whether the associated data between the primary bridged network element and the standby bridged network element meets the configuration specifications, and check the running status of the bridged service. The system checks to cover all L2VPN bridging services associated with the selected device. If multiple inspection rules are selected in the inspection scheme, the system will invoke multiple inspection rule processing procedures to perform the inspection. The inspection rules are different, the data sources obtained are different, and the processing flow is different.

FIG. 4 is a flowchart of a method for inspecting a bridging service and a bridging network element according to a first embodiment of the present invention. As shown in FIG. 4, the method includes the following steps:

Step S401: customizing the inspection plan;

According to the requirements of the on-site inspection, the user selects the inspection rules and customizes the inspection service of the bridging service. In one scheme, multiple inspection rules are supported, and multiple inspection schemes can be customized. The inspection scheme can be saved as a template, and the scheme template can be reused. The inspection plan supports checking multiple device types and checking multi-terminal devices.

Step S402: collecting an L2VPN service and a pseudowire protection group;

The system collects the L2VPN service of the selected device in the network and the pseudowire protection group associated with the selected device according to the customized inspection scheme.

Step S403: Identify the bridge service and the bridge network element.

The system analyzes the L2VPN service, finds the service floor network element and the output service port of each L2VPN service, and filters out the L2VPN service whose output service port of the service floor network element is a Layer 2 virtual interface or a virtual sub-interface. If the Layer 2 virtual interface has a one-to-one binding relationship with the Layer 3 virtual interface, and the corresponding Layer 2 virtual sub-interface has a corresponding relationship with the Layer 3 virtual sub-interface, the L2VPN service is considered to be a bridged service, that is, a bridge service. The node where the Layer 2 virtual interface of the output service resides is the bridged NE. The system analyzes the data of the pseudo-line protection group and filters out the single-issue double-received pseudo-line dual-return protection group. Then, the L2VPN service whose pseudo-line is a single-issue and dual-received pseudo-line dual-homing protection group is filtered out from the bridged L2VPN service. If there are two bridged NEs on the L2VPN service, the two bridged NEs are bridged NEs that are mutually active and standby. In the current network, a multi-to-one VSI or a multi-to-one VLAN aggregation bridging service configuration scheme is used, that is, multiple services from different base stations are aggregated and bridged to different bridging relationship pairs of the same node. Therefore, there will be multiple bridged L2VPN services passing through a bridged network element, one bridge There will be multiple pairs of bridged pairs on the connected network element. In the whole network, there will be multiple bridged network elements, and many of them are paired with each other. The system needs to identify all the bridged L2VPN services, the bridged NEs, and the primary and backup bridged NEs in the network.

Step S404: Invoking the patrol processing process to check the bridging service and the bridging network element.

The system invokes the corresponding inspection rule processing flow according to the inspection plan. According to the requirements of the inspection rule, the data source can be obtained from multiple ways, for example, the configuration parameters of the bridged network element, the primary bridged network element, and the standby bridged network element corresponding to the L2VPN bridging service are obtained from the network management system or the device. Status data. Check whether the bridging service and the bridging NE configuration data meet the configuration specifications, check whether the associated data between the primary bridged network element and the standby bridged NE meets the configuration specifications, and check the running status of the bridging service. The system checks all L2VPN bridging services associated with the selected device. If multiple inspection rules are selected in the inspection scheme, the system will invoke multiple inspection rule processing procedures to perform the inspection. The inspection rules are different, the data sources obtained are different, and the processing flow is different.

FIG. 5 is a flowchart of a bridging service and a method for inspecting a bridged network element according to a second embodiment of the present invention. As shown in FIG. 5, a patrol scheme is first customized, including an inspection rule: checking the bridging service in the network. Whether the gateway configuration conforms to the specification. The bridging service dual gateway refers to two bridging network elements that are mutually active and standby on the bridged L2VPN service. In this example, a multi-to-one VLAN aggregation bridging service configuration scheme is adopted. Multiple bridging network elements have multiple L2VPN bridging services, and one bridging network element has multiple pairs of bridging correspondences, and multiple bridging networks in the whole network. yuan. Specifically, the following steps are included:

Step S501: The user customizes a patrol scheme and selects a bridging service dual gateway configuration check check rule.

Step S502: Save the customized inspection plan as a template, which can be reused.

Step S503: According to the inspection scheme, select a device to be inspected in the network, and support multiple device types. This example selects all devices in the network.

Step S504: Acquire a pseudowire protection group associated with the selected device according to the selected device set.

Step S505: The system acquires the L2VPN service of the selected device according to the selected device set.

Step S506: Analyze the L2VPN service, and find the service floor network element and the output service port of each service.

In the step S507, the output service port of the service landing network element is the L2VPN service of the Layer 2 virtual interface or the virtual sub-interface. If the output service port of the service network element of the L2VPN service is not a Layer 2 virtual interface, the process ends.

Step S508: Check whether the Layer 2 virtual interface of the output service of the service network element of the L2VPN service is bound to the Layer 3 virtual interface one-to-one. If there is no one-to-one binding relationship, the flow ends, and if so, step S509 is performed downward.

In the step S509, the L2VPN service has a one-to-one binding relationship between the Layer 2 virtual interface and the Layer 3 virtual interface of the service network element. The L2VPN service is a bridged service, that is, a bridge service.

Step S510: The node where the Layer 2 virtual interface of the L2VPN bridging service output service is a bridged network element.

Step S511: The system analyzes the pseudowire protection group data, and filters out the single-issue double-received pseudo-line dual-homing protection group.

Step S512: Analyze the L2VPN service set with the bridge, and filter out the L2VPN service whose service layer pseudowire is a single-issue dual-received pseudo-line dual-homing protection group. If the L2VPN service is not found, that is, the L2VPN service with dual gateways is not found, the process of this example ends.

Step S513: If the service layer pseudowire is a single-issue dual-received pseudo-line dual-homing protection group, the L2VPN service has two bridged network elements, and is an L2VPN bridging service set with dual gateways.

Step S514: Each of the L2VPN bridging services with dual gateways has two bridging network elements, and the two bridging network elements are bridging network elements that are mutually active and standby in the current service. The system will identify all active and standby bridge node pairs.

Step S515: The system obtains the device type of the bridged network element from the network management according to the requirement of the inspection rule selected in the customized inspection plan.

Step S516: Determine the device type of the bridged network element.

Step S517: If the bridged network element is the device type 1, the system sends a command to the primary bridged network element and the standby bridged network element to query the configuration state of the virtual router redundancy protocol (VRRP).

Step S518: Compare the VRRP status of the primary bridged network element and the standby bridged network element, whether the status is consistent, and whether they are equal to the target value.

Step S519: If the VRRP status of the primary bridged network element and the standby bridged network element are the same and are equal to the target value, the dual gateway configuration of the current bridging service is considered to meet the configuration specification.

Step S520: If it is not the case of step S519, it is considered that the dual gateway configuration of the current bridging service does not conform to the configuration specification.

Step S521: If the bridged network element is not device type 1, the system queries the IP, MAC (Media Access Control) address, and mask address of the Layer 3 virtual sub-interface in the bridge relationship on the primary bridged network element. The system queries the IP, MAC, and mask addresses of the Layer 3 virtual sub-interfaces in the bridge relationship on the alternate bridged NE.

Step S522: Compare whether the IP, MAC, and mask addresses of the primary bridged network element that are queried in step S521 and the IP, MAC, and mask addresses of the alternate bridged network element are equal, that is, whether it is the primary bridged network element. The IP address of the alternate bridged network element is equal to the MAC address of the alternate bridged network element, and the MAC address of the primary bridged network element is equal to the mask address of the alternate bridged network element.

Step S523: If the IP, MAC, and mask addresses of the primary bridged network element that are queried in step S522 are equal to the IP, MAC, and mask addresses of the alternate bridged network element, the dual gateway of the current bridging service is considered to be equal. The configuration conforms to the configuration specification.

Step S524: If the IP, MAC, and mask addresses of the primary bridged network element that is queried in step S522 are not equal to the IP, MAC, and mask addresses of the alternate bridged network element, the dual gateway of the current bridging service is considered to be the same. The configuration does not meet the configuration specifications.

Step S525: Determine whether to check the dual gateway configuration of all the bridging services in the network. If the check is not completed, the process proceeds to step S515, and if the check is completed, the process is terminated.

In summary, the embodiment of the present invention identifies the bridging service and the bridging network element by analyzing the output service port of the service network element, that is, whether the output service port is a Layer 2 virtual interface or a virtual sub-interface, and the corresponding Layer 2 virtual interface and the third Whether the Layer 1 virtual interface has a one-to-one binding relationship, and whether the corresponding Layer 2 virtual sub-interface has a corresponding relationship with the Layer 3 virtual sub-interface. Multiple processing flows can be selected to check the bridging service, the bridging network element, and multiple configuration items associated with the active and standby bridging network elements. Can customize the inspection plan, and the inspection plan A template can be formed to support the patrol program reuse.

In summary, the technical solution of the present invention has the following technical effects:

In the technical solution of the present invention, the user can customize the inspection scheme and reuse the inspection scheme. The system can identify the L2VPN bridging service and the bridging network element in the network, and complete the bridging service and the bridging network element configuration and status check in the entire network. The manual input cost of the bridging service and the bridging network element inspection is greatly reduced, the difficulty of the bridging service and the bridging network element inspection is reduced, the efficiency of the inspection is improved, and the accuracy of the inspection is improved.

The embodiment of the invention further discloses a computer program, comprising program instructions, when the program instruction is executed by a computer, so that the computer can perform any of the above-mentioned bridging services and the inspection method of the bridged network element.

The embodiment of the invention also discloses a carrier carrying the computer program.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve. Thus, the invention is not limited to any specific combination of hardware and software.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

When each device/function module/functional unit in the above embodiment is implemented in the form of a software function module and sold or used as a stand-alone product, it can be stored in a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Variations or substitutions are readily conceivable within the scope of the present invention by those skilled in the art and are within the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the claims.

Industrial applicability

In the technical solution of the present invention, the user can customize the inspection scheme and reuse the inspection scheme. The system can identify the L2VPN bridging service and the bridging network element in the entire network, and complete the bridging service and the bridging network element configuration and status check in the entire network. The manual input cost of the bridging service and the bridging network element inspection is greatly reduced, the difficulty of the bridging service and the bridging network element inspection is reduced, the accuracy of the inspection and the efficiency of the inspection are improved, and the labor cost input is greatly reduced. Therefore, the present invention has strong industrial applicability.

Claims

A method for inspecting a bridging service and a bridging network element includes the following steps:

Selecting devices to be inspected in the network according to the bridging service and the inspection scheme of the bridged network element;

Obtaining an L2VPN service passing through the device;

The bridge service and the bridge network element related to the device in the network are identified by analyzing the configuration of the output service port of the L2VPN service floor network element;

Performing inspections on the bridging service and the bridging network element according to the bridging service and the inspection scheme of the bridged network element;

The L2VPN service refers to a Layer 2 virtual private network service.
The method for inspecting the bridging service and the bridging network element according to claim 1, the method further comprising:

Obtaining pseudowire protection group data associated with the device;

The primary bridged network element and the standby bridged network element are identified from the bridged network element by analyzing the pseudowire protection group data.
The method for inspecting the bridging service and the bridging network element according to claim 2, wherein the analyzing the configuration of the output service port of the L2VPN service floor network element to identify the bridging service related to the device in the network The steps include:

By analyzing the configuration of the output service port of the L2VPN service floor network element, filtering out the L2VPN service whose output service port of the L2VPN service floor network element is a Layer 2 virtual interface or a Layer 2 virtual sub-interface;

Determining whether the filtered L2VPN service is a bridged L2VPN service;

When it is determined that the filtered L2VPN service is a bridged L2VPN service, the L2VPN service is determined as a bridging service.
The method for inspecting the bridging service and the bridging network element according to claim 3, wherein the step of determining whether the filtered L2VPN service is a bridged L2VPN service comprises:

If the Layer 2 virtual interface of the output service of the L2VPN service network element has a one-to-one binding relationship with the Layer 3 virtual interface, determine that the filtered L2VPN service is a bridged L2VPN service; or By

If the Layer 2 virtual sub-interface of the output service of the L2VPN service network element has a one-to-one binding relationship with the Layer 3 virtual sub-interface, it is determined that the filtered L2VPN service is a bridged L2VPN service.
The method for inspecting the bridging service and the bridging network element according to claim 3, wherein the analyzing the configuration of the output service port of the L2VPN service floor network element to identify the bridge network associated with the device in the network The steps of the meta include:

The node where the Layer 2 virtual interface of the output service of the L2VPN service landing network element is located is a bridge network element; or

The node where the Layer 2 virtual sub-interface of the output service of the L2VPN service landing network element is located is used as the bridge network element.
The method for inspecting a bridging service and a bridging network element according to claim 5, wherein the analyzing the pseudowire protection group data, identifying an active bridging network element and a backup bridging network from the bridging network element The steps of the meta include:

By analyzing the pseudowire protection group data, filtering out the single-issue double-received pseudo-line dual-homing protection group;

According to the single-issue dual-received pseudo-line dual-homing protection group, filtering out the bridging service service layer pseudo-line is the first bridging service of the single-issue dual-received pseudo-line dual-homing protection group;

The two bridged network elements on the first bridging service are used as the primary bridged network element and the backup bridged network element.
The method of inspecting the bridging service and the bridging network element according to the bridging service and the bridging network element according to claim 6, wherein the step of inspecting the bridging service and the bridging network element according to the bridging service and the inspection scheme of the bridging network element includes:

Obtaining configuration parameters and status data of the bridged network element, the primary bridged network element, and the standby bridged network element corresponding to the bridging service according to the bridging service and the inspection scheme of the bridged network element;

The bridge service and the bridge network element are patrolled according to the configuration parameter and the status data.
The method for inspecting a bridging service and a bridging network element according to claim 7, wherein the bridging service and the inspection scheme of the bridging network element comprise a plurality of inspection rules; wherein bridging services and bridging for different equipment to be inspected The inspection plan of the NE invokes different inspection rules.
A patrol device for bridging services and bridging network elements, including a selection module, an L2VPN service module, an identification module, and a patrol module, wherein

The selection module is configured to: select a device to be inspected in the network according to the bridging service and the inspection scheme of the bridged network element;

The acquiring the L2VPN service module is configured to: obtain an L2VPN service that passes through the device;

The identifying module is configured to: identify a bridging service and a bridging network element related to the device in the network by analyzing a configuration of an output service port of the L2VPN service floor network element;

The patrol module is configured to perform patrol inspection on the bridging service and the bridging network element according to the bridging service and the patrol inspection scheme of the bridging network element.
The patrol device of the bridge service and the bridge network element according to claim 9, the device further comprising: acquiring a pseudowire protection group data unit,

The acquiring the pseudowire protection group data unit is configured to: acquire pseudowire protection group data associated with the device; and identify the primary bridge network element from the bridge network element by analyzing the pseudowire protection group data And alternate bridged network elements.
The patrol device of the bridge service and the bridge network element according to claim 10, wherein the identification module is configured to identify the network and the network by analyzing the configuration of the output service port of the L2VPN service floor network element as follows The device related bridging service:

By analyzing the configuration of the output service port of the L2VPN service floor network element, filtering out the L2VPN service whose output service port of the L2VPN service floor network element is a Layer 2 virtual interface or a Layer 2 virtual sub-interface;

Determining whether the filtered L2VPN service is a bridged L2VPN service;

When it is determined that the filtered L2VPN service is a bridged L2VPN service, the L2VPN service is determined as a bridging service.
The patrol device of the bridge service and the bridge network element according to claim 11, wherein the identification module is configured to determine whether the filtered L2VPN service is a bridged L2VPN service according to the following manner:

If the Layer 2 virtual interface of the output service of the L2VPN service network element has a one-to-one binding relationship with the Layer 3 virtual interface, determine that the filtered L2VPN service is a bridged L2VPN service; or By

If the Layer 2 virtual sub-interface of the output service of the L2VPN service network element has a one-to-one binding relationship with the Layer 3 virtual sub-interface, it is determined that the filtered L2VPN service is a bridged L2VPN service.
The patrol device of the bridge service and the bridge network element according to claim 11, wherein the identification module is configured to identify the network and the network by analyzing the configuration of the output service port of the L2VPN service floor network element. The steps of the device-related bridging network element include:

The node where the Layer 2 virtual interface of the output service of the L2VPN service landing network element is located is a bridge network element; or

The node where the Layer 2 virtual sub-interface of the output service of the L2VPN service landing network element is located is used as the bridge network element.
The patrol device of the bridge service and the bridge network element according to claim 13, wherein the acquisition pseudowire protection group data unit is configured to analyze the pseudowire protection group data from the bridge network element by: The primary bridged network element and the standby bridged network element are identified:

By analyzing the pseudowire protection group data, filtering out the single-issue double-received pseudo-line dual-homing protection group;

According to the single-issue dual-received pseudo-line dual-homing protection group, filtering out the bridging service service layer pseudo-line is the first bridging service of the single-issue dual-received pseudo-line dual-homing protection group;

The two bridged network elements on the first bridging service are used as the primary bridged network element and the backup bridged network element.
The patrol device of the bridge service and the bridge network element according to claim 14, wherein the patrol module is configured to perform the bridging service and the bridging network element according to the bridging service and the patrol inspection scheme of the bridged network element according to the following manner. Inspection:

Obtaining configuration parameters and status data of the bridged network element, the primary bridged network element, and the standby bridged network element corresponding to the bridging service according to the bridging service and the inspection scheme of the bridged network element;

The bridge service and the bridge network element are patrolled according to the configuration parameter and the status data.