Back to results
US 8,019,890 B2Granted
Network switch for logical isolation between user network and server unit management network and its operating method
AssigneeNEC Corporation
InventorShinji Abe
Life of this patent
Estimating the term…
Abstract
In a network switch including a user network port connectable to a user network, a plurality of down link ports each connectable to one server unit, a server unit management network port connectable to a server unit management network for managing the server unit, a store-and-forward switching unit connected to the user network port, the down link ports and the server unit management network port, and a control unit connected to the store-and-forward switching unit, when a packet that has arrived at one of the down link ports is a dynamic host configuration protocol (DHCP) packet including a network boot option, the control unit operates the store-and-forward switching unit to transmit the packet to the server unit management network port.
Claims36
A network switch comprising:
- a user network port connectable to a user network, the user network comprising a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit;
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports, the server unit management network comprising a pre-boot execution environment (PXE) server;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit, and
- a group register whereby the control unit is configured to transmit packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port,
- wherein, when a first packet that has arrived at one of said down link ports is a dynamic host configuration protocol (DHCP) packet including a network boot option, said control unit operates said store-and-forward switching unit to transmit said first packet to said server unit management network port;
- and
- wherein the DHCP server and the PXE server are separate and distinct and provide logical isolation between the user network and the server unit management network.
6 more elements
A network switch comprising:
- a user network port connectable to a user network, the user network comprising a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to one server unit;
- a server unit management network port connectable to a saver unit management network for managing said server unit, the server unit management network compromising a pre-boot execution environment (PXE) server;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit;
- a media access control (MAC) address storing unit connected to said control unit and constructed to store a correspondence between said user network port, said down link ports and said server unit management network port, and MAC addresses of nodes connected thereto;
- and
- a user network group register connected to said control unit and constructed to store data defining a user network group formed by said user network port and said down links and to configure said control unit to allow the transmission of packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port,
- wherein, when a first packet that has arrived at said user network port has a destination MAC address stored in said MAC address storing unit and corresponding to a port of said user network group defined by said user network group register, said control unit operates said store-and-forward switching unit to transmit said first packet to said port of said user network group,
- wherein, when a second packet that has arrived at said user network port has a destination MAC address not stored in said MAC address storing unit, said control unit operates said store-and-forward switching unit to transmit said second packet to all ports has of said user network group except for said user network port, and
- wherein, when a third packet that has arrived at said user network port has a destination MAC address stored in said MAC address storing unit and corresponding not to a port of said user network group defined by said user network group register, said control unit operates said store-and-forward switching unit to scrap said third packet, and
- wherein the DHCP server and the PXE server are separate and distinct and provide logical isolation between the user network and the server unit management network.
9 more elements
A network switch comprising:
- a user network port connectable to a user network, the user network compromising a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to one server unit;
- a server unit management network port connectable to a server unit management network for managing said server unit, the server unit management network compromising a pre-boot execution environment (PXE) server;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit;
- a media access control (MAC) address storing unit connected to said control unit and constructed to store a correspondence between said user network port, said down link ports and said server unit management network port, and MAC addresses of nodes connected thereto;
- and
- a server unit management network group register connected to said control unit and constructed to store data defining a server unit management network group formed by said server unit management network port and said down links and to configure said control unit to allow the transmission of packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port,
- wherein, when a first packet that has arrived at said server unit management network port has a destination MAC address stored in said MAC address storing unit and corresponding to a port of said server unit management network group defined by said server unit management network group register, said control unit operates said store-and-forward switching unit to transmit said first packet to said port of said server unit management network group,
- wherein, when a second packet that has arrived at said server unit management network port has a destination MAC address not stored in said MAC address storing unit, said control unit operates said store-and-forward switching unit to transmit said second packet to all ports of said server unit management network group except for said server unit management network port, and
- wherein, when a third packet that has arrived at said server unit management network port has a destination MAC address stored in said MAC address storing unit and corresponding not to a port of said server unit management network group defined by said server unit management network group register, said control unit operates said store-and-forward switching unit to scrap said third packet;
- and
- wherein the DHCP server and the PXE server are separate and distinct and provide logical isolation between the user network and the server unit management network.
10 more elements
A method for operating a network switch connected to a user network, server units and a server unit management network, for allowing the transmission of packets between the user network and the server unit, between the server unit management network and the server link units and between server units and preventing the transmission of packets between the user network and the server unit management network, comprising:
- determining whether a packet that has arrived from one of said server units to said network switch is a dynamic host configuration protocol (DHCP) packet or a non-DHCP packet;
- determining whether or not said packet includes a network boot option;
- transmitting said packet to said server unit management network when said packet IS said DHCP packet and includes said network boot option;
- and
- configuring the server unit management network to operate with a pre-boot execution environment (PXE) server placed inside the server unit management network;
- wherein the PXE server is separate and distinct from a dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
3 more elements
A method for operating a network switch comprised of a user network port connectable to a user network, the user network comprising;
- a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit;
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports;
- the server unit management network comprising a pre-boot execution environment (PXE) server:
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit, and a group, register whereby the control unit is configured to transmit packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port said method comprising:
- determining whether a packet that has arrived from said user network to said network switch includes a destination media access control (MAC) address that is registered in a MAC address storing unit of said network switch;
- determining whether or not a port corresponding to said destination MAC address in said MAC address storing unit belongs to a user network group formed by said user network and a server unit when said destination MAC address is registered;
- transmitting said packet to said port when said port belongs to said user network group;
- and
- configuring the server unit management network to operate with said pre-boot execution environment (PXE) server placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
9 more elements
A method for operating a network switch comprised of a user network port connectable to a user network, the user network comprising a dynamic host confirmation protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit:
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports;
- the server unit management network comprising a pre-boot execution environment (PXE) sewer;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit, and a group register whereby the control unit is confirmed to transmit packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port, said method comprising:
- determining whether a packet that has arrived from said user network to said network switch includes a destination media access control (MAC) address that is registered in a MAC address storing unit of said network switch;
- transmitting said packet to all ports belonging to a user network group formed by said user network and a & server unit except said user network when said destination MAC address is not registered;
- and
- configuring the server unit management network to operate with said pre-boot execution environment (PXE) server placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
7 more elements
A method for operating a network switch comprised of a user network port connectable to a user network, the user network comprising a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit;
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports;
- the server unit management network comprising a pre-boot execution environment (PXE) sewer:
- a store-and-forward switching unit connected to said user network port;
- said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit, and a group register whereby the control unit is configured to transmit packets between the user network port and the down link ports;
- between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port, said method comprising:
- determining whether a packet that has arrived from said user network to said network switch includes a destination media access control (MAC) address that is registered in a MAC address storing unit of said network switch;
- determining whether or not a port corresponding to said destination MAC address in said MAC address storing unit belongs to a user network group formed by said user network and a server unit when said destination MAC address is registered;
- scrapping said packet when said port does not belong to said user network group;
- and
- configuring the server unit management network to operate with pre-boot execution environment (PXE) saver placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
10 more elements
A method for operating a network switch comprised of a user network port connectable to a user network, the user network comprising a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit;
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports, the server unit management network comprising a pre-boot execution environment (PXE) server:
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit, and a group register whereby the control unit is configured to transmit packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port, said method comprising:
- determining whether a packet that has arrived from said server unit management network to said network switch includes a destination media access control (MAC) address that is registered in a MAC address storing unit of said network switch;
- determining whether or not a port corresponding to said destination MAC address in said MAC address storing unit belongs to a server unit management network group formed by said server unit management network and a server unit when said destination MAC address is registered;
- transmitting said packet to said port when said port belongs to said server unit management network group;
- and
- configuring the server unit management network to operate with pre-boot execution environment (PXE) sewer placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
7 more elements
A method for operating a network switch comprised of a user network port connectable to a user network;
- the user network comprising dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit:
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports, the server unit management network comprising a pre-boot execution environment (PXE) server;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit;
- and a group register whereby the control unit is configured to transmit packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port, said method comprising:
- determining whether a packet that has arrived from said server unit management network to said network switch includes a destination media access control (MAC) address that is registered in a MAC address storing unit of said network switch;
- transmitting said packet to all ports belonging to a server unit management network group formed by said server unit management network and a server unit except said server unit management network when said destination MAC address is not registered;
- and
- configuring the server unit management network to operate with said pre-boot execution environment (PXE) server placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
8 more elements
A method for operating a network switch comprised of a user network port connectable to a user network, the user network comprising a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit;
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports, the server unit management network comprising a pre-boot execution environment (PXE) server;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit, and a group register whereby the control unit is configured to transmit packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port, said method comprising:
- determining whether a packet that has arrived from said server unit management network to said network switch includes a destination media access control (MAC) address that is registered in a MAC address storing unit of said network switch;
- determining whether or not a port corresponding to said destination MAC address in said MAC address storing unit belongs to a server unit management network group formed by said server unit management network and a server unit when said destination MAC address is registered;
- scrapping said packet when said port does not belong to said server unit management network group;
- and
- configuring the server unit management network to operate with said pre-boot execution environment (PXE) server placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
7 more elements
A method for operating a network switch comprised of a user network port connectable to a user network, the user network comprising a dynamic host confirmation protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit:
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports, the server unit management network comprising a pre-boot execution environment (PXE) server;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit;
- and a group register whereby the control unit is configured to transmit packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port, said method comprising:
- receiving a broadcast dynamic host configuration protocol (DHCP) packet including no network boot option from one of said a server unit, to transmit said broadcast DHCP packet to said user network;
- receiving a broadcast Internet protocol (IP) address packet from said user network in response to said broadcast DHCP packet, to transmit said broadcast IP address packet to a server unit;
- and
- configuring the server unit management network to operate with said pre-boot execution environment (PXE) server placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
7 more elements
A method for operating a network switch comprised of a user network port connectable to a user network, the user network comprising a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit;
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports, the server unit management network comprising a pre-boot execution environment (PXE) server;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit, and a group register whereby the control unit is configured to transmit packets between the user network port and the down link ports;
- between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port, said method comprising:
- receiving a broadcast dynamic host configuration protocol (DHCP) packet including a network boot option from a server unit, to transmit said broadcast DHCP packet to said server unit management network;
- receiving a broadcast Internet protocol (IP) address packet from said server unit management network in response to said broadcast DHCP packet, to transmit said broadcast IP address packet to a server unit;
- and
- configuring the server unit management network to operate with said pre-boot execution environment (PXE) server placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
7 more elements
A method for operating a network switch comprised of a user network port connectable to a user network, the user network comprising a dynamic host configuration protocol (DHCP) server;
- a plurality of down link ports each connectable to a server unit;
- a server unit management network port connectable to a server unit management network for managing server units connected to the down link ports, the server unit management network comprising a pre-boot execution environment (PXE) server;
- a store-and-forward switching unit connected to said user network port, said down link ports and said server unit management network port;
- a control unit connected to said store-and-forward switching unit;
- and a group register whereby the control unit is configured to transmit packets between the user network port and the down link ports, between the server management network port and the down link ports and between the down link ports and to prevent the transmission of packets between the user network port and the server management network port, said method comprising:
- receiving a dynamic host configuration protocol (DHCP) packet including a network boot option from a pool server unit, to transmit said DHCP packet to said server unit management network;
- receiving a boot file parameter packet from said server unit management network in response to said DHCP packet, to transmit said boot file parameter packet to said pool server unit and
- configuring the server unit management network to operate with said pre-boot execution environment (PXE) server placed inside the server unit management network;
- wherein the PXE server is separate and distinct from said dynamic host configuration protocol (DHCP) server that is located inside the user network, and wherein the PXE server and the DHCP server provide logical isolation between the user network and the server unit management network.
6 more elements
Dependencies are inferred from the claim text.